cbcvebase.
CVE-2024-26005
published 2024-03-12

CVE-2024-26005: An unauthenticated remote attacker can gain service level privileges through an incomplete cleanup during service restart after a DoS.

PriorityP426medium4.8CVSS 3.1
AVNACHPRNUINSUCLILAN
EPSS
0.62%
45.7th percentile
An unauthenticated remote attacker can gain service level privileges through an incomplete cleanup during service restart after a DoS.

Affected

8 ranges
VendorProductVersion rangeFixed in
phoenix_contactcharx_sec-3000<= 1.5.0
phoenix_contactcharx_sec-3050<= 1.5.0
phoenix_contactcharx_sec-3100<= 1.5.0
phoenix_contactcharx_sec-3150<= 1.5.0
phoenixcontactcharx_sec-3000_firmware< 1.5.11.5.1
phoenixcontactcharx_sec-3050_firmware< 1.5.11.5.1
phoenixcontactcharx_sec-3100_firmware< 1.5.11.5.1
phoenixcontactcharx_sec-3150_firmware< 1.5.11.5.1
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.