8.7
CVE-2026-44107
- EPSS 0.31%
- Veröffentlicht 30.07.2026 07:16:59
- Zuletzt bearbeitet 30.07.2026 16:17:12
- CVE-Watchlists
- Unerledigt
Exposed Reboot via Modbus
A reboot of the charging controller can be triggered via Modbus TCP without authentication. Therefore, when the Modbus functionality is enabled by opening the port that CharxModbusServer is listening, an unauthenticated attacker can perform a Denial-of-Service attack.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerPhoenix Contact
≫
Produkt
CHARX SEC-3150
Default Statusunaffected
Version
1.0.0
Version <
1.9.1
Status
affected
HerstellerPhoenix Contact
≫
Produkt
CHARX SEC-3100
Default Statusunaffected
Version
1.0.0
Version <
1.9.1
Status
affected
HerstellerPhoenix Contact
≫
Produkt
CHARX SEC-3050
Default Statusunaffected
Version
1.0.0
Version <
1.9.1
Status
affected
HerstellerPhoenix Contact
≫
Produkt
CHARX SEC-3000
Default Statusunaffected
Version
1.0.0
Version <
1.9.1
Status
affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.31% | 0.233 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| info@cert.vde.com | 8.7 | 0 | 0 |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
|
| info@cert.vde.com | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
|
CWE-749 Exposed Dangerous Method or Function
The product provides an Applications Programming Interface (API) or similar interface for interaction with external actors, but the interface includes a dangerous method or function that is not properly restricted.
https://www.certvde.com/en/advisories/VDE-2026-008/