9.8
CVE-2026-44104
- EPSS 0.24%
- Veröffentlicht 30.07.2026 07:16:58
- Zuletzt bearbeitet 30.07.2026 15:16:33
- CVE-Watchlists
- Unerledigt
ControllerAgent does not perform validation of firmware
The firmware update process for the basemodule of the charging controller only validates the CRC32 checksum without cryptographic signature verification. This allows an unauthenticated remote attacker to install a modified firmware, resulting in full system compromise.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerPhoenix Contact
≫
Produkt
CHARX SEC-3150
Default Statusunaffected
Version
1.0.0
Version <
1.9.1
Status
affected
HerstellerPhoenix Contact
≫
Produkt
CHARX SEC-3100
Default Statusunaffected
Version
1.0.0
Version <
1.9.1
Status
affected
HerstellerPhoenix Contact
≫
Produkt
CHARX SEC-3050
Default Statusunaffected
Version
1.0.0
Version <
1.9.1
Status
affected
HerstellerPhoenix Contact
≫
Produkt
CHARX SEC-3000
Default Statusunaffected
Version
1.0.0
Version <
1.9.1
Status
affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.24% | 0.154 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| info@cert.vde.com | 9.3 | 0 | 0 |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
|
| info@cert.vde.com | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
CWE-347 Improper Verification of Cryptographic Signature
The product does not verify, or incorrectly verifies, the cryptographic signature for data.
https://www.certvde.com/en/advisories/VDE-2026-008/