Phoenix Contact vulnerabilities
193 CVEs and advisories name Phoenix Contact as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-24005Local Privilege Escalation via Vulnerable SSH Script
- CVE-2025-24004USB-C Buffer Overflow via Display Interface in EV Charging Stations
- CVE-2025-24003MQTT OOB Write Vulnerability in EichrechtAgents of German EV Charging Stations
- CVE-2025-24002MQTT DoS Vulnerability in German EV Charging Stations
- CVE-2018-25112PHOENIX CONTACT: ILC 1x1 ETH Denial of Service
- CVE-2024-11497Phoenix Contact: CHARX-SEC3xxx Charge controllers vulnerable to privilege escalation
- CVE-2024-43393Phoenix Contact: Configuration changes of the firewall services can lead to DoS in MGUARD devices
- CVE-2024-43392Phoenix Contact: Firewall reconfiguration through the FW_environment variables in MGUARD devices
- CVE-2024-43391Phoenix Contact: Firewall reconfiguration through the FW_PORTFORWARDING.SRC_IP in MGUARD devices
- CVE-2024-43390Phoenix Contact: Firewall reconfiguration due to improper input validation in MGUARD devices
- CVE-2024-43389Phoenix Contact: OSPF reconfiguration due to improper input validation in MGUARD devices
- CVE-2024-43388Phoenix Contact: SNMP reconfiguration due to improper input validation in MGUARD devices
- CVE-2024-43387Phoenix Contact: Access files due to improper neutralization of special elements in MGUARD devices
- CVE-2024-43386Phoenix Contact: OS command execution through EMAIL_NOTIFICATION.TO in mGuard devices.
- CVE-2024-43385Phoenix Contact: OS command execution through PROXY_HTTP_PORT in mGuard devices
- CVE-2024-7699Phoenix Contact: OS command execution in MGUARD products
- CVE-2024-7698Phoenix Contact: Access to CSRF tokens of higher privileged users in MGUARD products
- CVE-2024-7734Phoenix Contact: Multiple mGuard devices are vulnerable to a drain of open file descriptors.
- CVE-2024-6788Phoenix Contact: update feature from CHARX controller can be used to reset a low privilege user password
- CVE-2024-3913Phoenix Contact: Start sequence allows attack during the boot process
- CVE-2024-28137PHOENIX CONTACT: privilege escalation due to a TOCTOU vulnerability in the CHARX Series
- CVE-2024-28136PHOENIX CONTACT: command injection gains root privileges using the OCPP remote service
- CVE-2024-28135PHOENIX CONTACT: command injection vulnerability in the API of the CHARX Series
- CVE-2024-28134PHOENIX CONTACT: MitM attack gains privileges of the current logged in user in CHARX Series
- CVE-2024-28133PHOENIX CONTACT: Privilege escalation in CHARX Series
- CVE-2024-26288PHOENIX CONTACT: Lack of SSL support in CHARX Series
- CVE-2024-26005PHOENIX CONTACT: Privilege gain through incomplete cleanup in CHARX Series
- CVE-2024-26004PHOENIX CONTACT: DoS of a control agent due to access of a uninitialized pointer in CHARX Series
- CVE-2024-26003PHOENIX CONTACT: DoS of the control agent in CHARX Series
- CVE-2024-26002PHOENIX CONTACT: File ownership manipulation in CHARX Series