CVE-2024-3913

An unauthenticated remote attacker can use this vulnerability to change the device configuration due to a file writeable for short time after system startup.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.9 MEDIUM
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CERTVDECNA
5.9 MEDIUM
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 27%
VendorProductVersion
phoenixcontactcharx_sec_3000
1.7.0 <
𝑥
< 1.7.0
phoenixcontactcharx_sec_3050
1.7.0 <
𝑥
< 1.7.0
phoenixcontactcharx_sec_3100
1.7.0 <
𝑥
< 1.7.0
phoenixcontactcharx_sec_3150
1.7.0 <
𝑥
< 1.7.0
phoenixcontactcharx_sec-3150_firmware
𝑥
< 1.6.3
phoenixcontactcharx_sec-3100_firmware
𝑥
< 1.6.3
phoenixcontactcharx_sec-3050_firmware
𝑥
< 1.6.3
phoenixcontactcharx_sec-3000_firmware
𝑥
< 1.6.3
𝑥
= Vulnerable software versions