CVE-2024-28136 | Phoenix Contact CHARX SEC-3150 up to 1.5.1 OCPP Remote Service command injection (VDE-2024-019)

A vulnerability classified as critical has been found in Phoenix Contact CHARX SEC-3000, CHARX SEC-3050, CHARX SEC-3100 and CHARX SEC-3150 up to 1.5.1. This affects an unknown part of the component OCPP Remote Service. The manipulation leads to command injection.

This vulnerability is uniquely identified as CVE-2024-28136. Attacking locally is a requirement. There is no exploit available.