CVE-2024-25998 | Phoenix Contact CHARX SEC-3150 up to 1.5.0 OCPP Service command injection (VDE-2024-011)

A vulnerability has been found in Phoenix Contact CHARX SEC-3000, CHARX SEC-3050, CHARX SEC-3100 and CHARX SEC-3150 up to 1.5.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the component OCPP Service. The manipulation leads to command injection.

This vulnerability is known as CVE-2024-25998. The attack can be launched remotely. There is no exploit available.