2024-03-12 11:03:23 +00:00
{
"id" : "CVE-2024-26003" ,
"sourceIdentifier" : "info@cert.vde.com" ,
"published" : "2024-03-12T09:15:09.140" ,
2025-01-23 19:03:50 +00:00
"lastModified" : "2025-01-23T18:48:31.273" ,
"vulnStatus" : "Analyzed" ,
2024-07-14 02:06:08 +00:00
"cveTags" : [ ] ,
2024-03-12 11:03:23 +00:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "An unauthenticated remote attacker can DoS the control agent due to a out-of-bounds read which may prevent or disrupt the charging functionality.\u00a0"
2024-03-12 15:04:12 +00:00
} ,
{
"lang" : "es" ,
"value" : "Un atacante remoto no autenticado puede hacer DoS al agente de control debido a una lectura fuera de los l\u00edmites que puede impedir o interrumpir la funcionalidad de carga."
2024-03-12 11:03:23 +00:00
}
] ,
"metrics" : {
"cvssMetricV31" : [
{
"source" : "info@cert.vde.com" ,
2025-02-09 03:03:48 +00:00
"type" : "Primary" ,
2024-03-12 11:03:23 +00:00
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" ,
2024-12-08 03:06:42 +00:00
"baseScore" : 7.5 ,
"baseSeverity" : "HIGH" ,
2024-03-12 11:03:23 +00:00
"attackVector" : "NETWORK" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "NONE" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "NONE" ,
"integrityImpact" : "NONE" ,
2024-12-08 03:06:42 +00:00
"availabilityImpact" : "HIGH"
2024-03-12 11:03:23 +00:00
} ,
"exploitabilityScore" : 3.9 ,
"impactScore" : 3.6
}
]
} ,
"weaknesses" : [
{
"source" : "info@cert.vde.com" ,
2025-02-09 03:03:48 +00:00
"type" : "Primary" ,
2024-03-12 11:03:23 +00:00
"description" : [
{
"lang" : "en" ,
"value" : "CWE-125"
}
]
}
] ,
2025-01-23 19:03:50 +00:00
"configurations" : [
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:phoenixcontact:charx_sec-3000_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "1.5.1" ,
"matchCriteriaId" : "2D503940-7117-4D15-ACA8-0CCEEBB2DB18"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:phoenixcontact:charx_sec-3000:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "D1095269-9D5A-4557-BA9D-33B49AAA339F"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:phoenixcontact:charx_sec-3050_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "1.5.1" ,
"matchCriteriaId" : "B5ABD397-F1C6-4C06-AF8C-506C211D46E6"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:phoenixcontact:charx_sec-3050:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "775BA5ED-968B-4759-BA39-50F9EAB29169"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:phoenixcontact:charx_sec-3100_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "1.5.1" ,
"matchCriteriaId" : "EE7B38B8-A035-4897-A3A7-D65DC7EC5793"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:phoenixcontact:charx_sec-3100:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "F498BFB3-3C39-4F0B-9775-0B4F891D866C"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:phoenixcontact:charx_sec-3150_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "1.5.1" ,
"matchCriteriaId" : "0138361A-DD4C-4A19-86A6-6D0BA7AA649A"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:phoenixcontact:charx_sec-3150:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "32916BED-0241-4787-960C-7A4E8E1DDED7"
}
]
}
]
}
] ,
2024-03-12 11:03:23 +00:00
"references" : [
{
"url" : "https://cert.vde.com/en/advisories/VDE-2024-011" ,
2025-01-23 19:03:50 +00:00
"source" : "info@cert.vde.com" ,
"tags" : [
"Third Party Advisory"
]
2024-12-08 03:06:42 +00:00
} ,
{
"url" : "https://cert.vde.com/en/advisories/VDE-2024-011" ,
2025-01-23 19:03:50 +00:00
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Third Party Advisory"
]
2024-03-12 11:03:23 +00:00
}
]
}