← Database
CVE-2024-6788
HIGH
CVSS: 8.6
Published: 2024-08-13
Modified: 2026-06-17
Description
A remote unauthenticated attacker can use the firmware update feature on the LAN interface of the device to reset the password for the predefined, low-privileged user “user-app” to the default password.
Affected Platforms
Phoenixcontact Charx Sec-3000Phoenixcontact Charx Sec-3000 FirmwarePhoenixcontact Charx Sec-3050 FirmwarePhoenixcontact Charx Sec-3100Phoenixcontact Charx Sec-3150 FirmwarePhoenixcontact Charx Sec-3150Phoenixcontact Charx Sec-3050Phoenixcontact Charx Sec-3100 Firmware