Skip to content

RadicalNotion.AI

We do not sell or share your personal information.

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Leaderboard
CNA Report Cards
Vendor Directory
Patched Functions
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0
Badge Builder

Platform

My Vulnerabilities
Insights
Notifications
Pricing

Learn

Guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About
Blog
Careers
Contact
Demo

Account

Sign up
Log in

Legal

Security
Privacy
Terms

RadicalNotion.AI

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities and report cards
VendorsVulnerabilities by vendor
Patched FunctionsWhere CVE fixes land in code

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0
Badge BuilderEmbeddable SVG badges for READMEs

Resources

LearnSecurity guides
Data SourcesCVE data sources

About Blog Pricing Demo

Log in Create an account

Home
Vendors
Phoenix Contact
Charx Sec 3000 Firmware

Phoenix Contact charx sec-3000 firmware Vulnerabilities: CVEs, CISA KEV & Security Advisories

Phoenix Contact

30 CVEs

PC

Phoenix Contact charx sec-3000 firmware Vulnerabilities

CVE security advisories and vulnerability history for charx sec-3000 firmware by Phoenix Contact.

30

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

7.6

Avg CVSS

2024–2026

Last updated June 3, 2026

Overview

Phoenix Contact charx sec-3000 firmware has 30 published CVE records since 2024, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 7.6. Affected platforms include charx sec-3000.

Severity and exploitation

How the CVSS severity of Phoenix Contact charx sec-3000 firmware's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical5

High18

Medium7

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Phoenix Contact charx sec-3000 firmware's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No Phoenix Contact charx sec-3000 firmware CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every Phoenix Contact charx sec-3000 firmware version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 1.5.113 CVEs
< 1.7.36 CVEs
<= 1.5.15 CVEs
<= 1.6.53 CVEs
< 1.6.32 CVEs
1.0.0 <= v < 1.9.01 CVE

Fixed in

1.5.113 CVEs
1.7.36 CVEs
1.6.32 CVEs
1.9.01 CVE

Find a version

30 CVEs

Sort

Phoenix Contact: Unauthenticated log download vulnerability in the firmware of CHARX SEC-3xxx charging controllers
CVE-2026-41032
Patch
CWE-200
High · CVSS 7.5
EPSS 0.4% (36th pct)2026-06-03
OCPP Backend Configuration via Insecure Defaults
CVE-2025-25271
Patch
CWE-1188
High · CVSS 8.8
EPSS 0.3% (27th pct)2025-07-08
Remote Code Execution via Unauthenticated Configuration Manipulation
CVE-2025-25270
Patch
CWE-913
Critical · CVSS 9.8
EPSS 0.8% (54th pct)2025-07-08
Local Privilege Escalation via Unauthenticated Command Injection
CVE-2025-25269
Patch
CWE-78
High · CVSS 8.4
EPSS 0.3% (21th pct)2025-07-08
Unauthenticated Configuration Access via Exposed API Endpoint
CVE-2025-25268
Patch
CWE-306
High · CVSS 8.8
EPSS 0.4% (28th pct)2025-07-08
Privilege Escalation via Insecure SSH Permissions
CVE-2025-24006
Patch
CWE-269
High · CVSS 7.8
EPSS 0.1% (2th pct)2025-07-08
Local Privilege Escalation via Vulnerable SSH Script
CVE-2025-24005
Patch
CWE-20
High · CVSS 7.8
EPSS 0.1% (3th pct)2025-07-08
USB-C Buffer Overflow via Display Interface in EV Charging Stations
CVE-2025-24004CWE-120
Medium · CVSS 5.2
EPSS 0.2% (8th pct)2025-07-08
MQTT OOB Write Vulnerability in EichrechtAgents of German EV Charging Stations
CVE-2025-24003CWE-120
High · CVSS 8.2
EPSS 0.4% (33th pct)2025-07-08
MQTT DoS Vulnerability in German EV Charging Stations
CVE-2025-24002CWE-20
Medium · CVSS 5.3
EPSS 0.4% (35th pct)2025-07-08
Phoenix Contact: update feature from CHARX controller can be used to reset a low privilege user password
CVE-2024-6788
Patch
CWE-1392
Critical · CVSS 9.8
EPSS 0.5% (42th pct)2024-08-13
Medium vulnerability · 2024-08-13
CVE-2024-3913
Patch
CWE-552
Medium · CVSS 5.9
EPSS 0.5% (42th pct)2024-08-13
High vulnerability · 2024-05-14
CVE-2024-28137CWE-367
High · CVSS 7.8
EPSS 0.3% (16th pct)2024-05-14
High vulnerability · 2024-05-14
CVE-2024-28136CWE-77
High · CVSS 7.8
EPSS 0.8% (54th pct)2024-05-14
Medium vulnerability · 2024-05-14
CVE-2024-28135CWE-77
Medium · CVSS 5.0
EPSS 1.3% (69th pct)2024-05-14
High vulnerability · 2024-05-14
CVE-2024-28134CWE-319
High · CVSS 7.0
EPSS 0.5% (41th pct)2024-05-14
High vulnerability · 2024-05-14
CVE-2024-28133CWE-426
High · CVSS 7.8
EPSS 0.4% (30th pct)2024-05-14
High vulnerability · 2024-03-12
CVE-2024-26288
Patch
CWE-319
High · CVSS 8.7
EPSS 0.3% (22th pct)2024-03-12
Medium vulnerability · 2024-03-12
CVE-2024-26005
Patch
CWE-459
Medium · CVSS 4.8
EPSS 0.6% (49th pct)2024-03-12
High vulnerability · 2024-03-12
CVE-2024-26004
Patch
CWE-824
High · CVSS 7.5
EPSS 1.0% (62th pct)2024-03-12
High vulnerability · 2024-03-12
CVE-2024-26003
Patch
CWE-125
High · CVSS 7.5
EPSS 1.2% (67th pct)2024-03-12
High vulnerability · 2024-03-12
CVE-2024-26002
Patch
CWE-20
High · CVSS 7.8
EPSS 0.3% (16th pct)2024-03-12
Critical vulnerability · 2024-03-12
CVE-2024-26001
Patch
CWE-787
Critical · CVSS 9.8
EPSS 0.9% (58th pct)2024-03-12
High vulnerability · 2024-03-12
CVE-2024-26000
Patch
CWE-125
High · CVSS 7.5
EPSS 0.8% (56th pct)2024-03-12
High vulnerability · 2024-03-12
CVE-2024-25999
Patch
CWE-20
High · CVSS 8.4
EPSS 0.4% (34th pct)2024-03-12
High vulnerability · 2024-03-12
CVE-2024-25998
Patch
CWE-77
High · CVSS 7.3
EPSS 1.5% (73th pct)2024-03-12
Medium vulnerability · 2024-03-12
CVE-2024-25997
Patch
CWE-20
Medium · CVSS 5.3
EPSS 0.7% (52th pct)2024-03-12
Critical vulnerability · 2024-03-12
CVE-2024-25996
Patch
CWE-346
Critical · CVSS 9.8
EPSS 0.4% (32th pct)2024-03-12
Critical vulnerability · 2024-03-12
CVE-2024-25995
Patch
CWE-20
Critical · CVSS 9.8
EPSS 1.4% (72th pct)2024-03-12
Medium vulnerability · 2024-03-12
CVE-2024-25994
Patch
CWE-434
Medium · CVSS 5.3
EPSS 0.7% (53th pct)2024-03-12

Common weakness types

The CWE weakness categories most often found in Phoenix Contact charx sec-3000 firmware CVEs. Follow any weakness for its full explanation.

CWE-20Improper Input Validation6 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')3 CVEs
CWE-125Out-of-bounds Read2 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')2 CVEs
CWE-319Cleartext Transmission of Sensitive Information2 CVEs
CWE-269Improper Privilege Management1 CVE
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVE
CWE-306Missing Authentication for Critical Function1 CVE

Disclosure activity by year

How many Phoenix Contact charx sec-3000 firmware CVEs were published each year.

2024

20

2025

9

2026

1

Other Phoenix Contact products

Browse vulnerabilities for other products by Phoenix Contact.

CHARX SEC-300052 CVEs CHARX SEC-305052 CVEs CHARX SEC-310052 CVEs CHARX SEC-315052 CVEs charx sec 315037 CVEs charx sec 300036 CVEs charx sec 305036 CVEs charx sec 310036 CVEs

All Phoenix Contact vulnerabilities

Frequently asked questions

Common questions about Phoenix Contact charx sec-3000 firmware vulnerabilities.

How many CVEs does Phoenix Contact charx sec-3000 firmware have?: Phoenix Contact charx sec-3000 firmware has 30 published CVE records since 2024.
How many Phoenix Contact charx sec-3000 firmware CVEs are in CISA KEV?: None of Phoenix Contact charx sec-3000 firmware's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Phoenix Contact charx sec-3000 firmware vulnerabilities?: No Phoenix Contact charx sec-3000 firmware CVEs currently have a tracked public exploit in this dataset.
Which versions of Phoenix Contact charx sec-3000 firmware are affected?: 10 distinct Phoenix Contact charx sec-3000 firmware versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Phoenix Contact charx sec-3000 firmware CVEs?: Phoenix Contact charx sec-3000 firmware's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection')), CWE-125 (Out-of-bounds Read), CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')).
How many critical Phoenix Contact charx sec-3000 firmware vulnerabilities are there?: Phoenix Contact charx sec-3000 firmware has 5 critical and 18 high-severity CVEs.
What is the average severity of Phoenix Contact charx sec-3000 firmware CVEs?: The average CVSS base score across Phoenix Contact charx sec-3000 firmware's scored CVEs is 7.6.

References

All Phoenix Contact vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Phoenix Contact charx sec-3000 firmware vulnerabilities

Get an alert for each new Phoenix Contact charx sec-3000 firmware CVE, with AI-written analysis and remediation steps.

Create an account See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Disclosure activity
Other products
FAQ
References