Vulnerability Details CVE-2024-26000
An unauthenticated remote attacker can read memory out of bounds due to improper input validation in the MQTT stack. The brute force attack is not always successful because of memory randomization.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 29.1%
CVSS Severity
CVSS v3 Score 5.9
Products affected by CVE-2024-26000
-
cpe:2.3:h:phoenixcontact:charx_sec-3000:-
-
cpe:2.3:h:phoenixcontact:charx_sec-3050:-
-
cpe:2.3:h:phoenixcontact:charx_sec-3100:-
-
cpe:2.3:h:phoenixcontact:charx_sec-3150:-
-
cpe:2.3:o:phoenixcontact:charx_sec-3000_firmware:-
-
cpe:2.3:o:phoenixcontact:charx_sec-3000_firmware:1.2.1
-
cpe:2.3:o:phoenixcontact:charx_sec-3000_firmware:1.3.0
-
cpe:2.3:o:phoenixcontact:charx_sec-3000_firmware:1.3.3
-
cpe:2.3:o:phoenixcontact:charx_sec-3000_firmware:1.4.1
-
cpe:2.3:o:phoenixcontact:charx_sec-3000_firmware:1.4.2
-
cpe:2.3:o:phoenixcontact:charx_sec-3000_firmware:1.5.0
-
cpe:2.3:o:phoenixcontact:charx_sec-3050_firmware:-
-
cpe:2.3:o:phoenixcontact:charx_sec-3050_firmware:1.2.1
-
cpe:2.3:o:phoenixcontact:charx_sec-3050_firmware:1.3.0
-
cpe:2.3:o:phoenixcontact:charx_sec-3050_firmware:1.3.3
-
cpe:2.3:o:phoenixcontact:charx_sec-3050_firmware:1.4.1
-
cpe:2.3:o:phoenixcontact:charx_sec-3050_firmware:1.4.2
-
cpe:2.3:o:phoenixcontact:charx_sec-3050_firmware:1.5.0
-
cpe:2.3:o:phoenixcontact:charx_sec-3100_firmware:-
-
cpe:2.3:o:phoenixcontact:charx_sec-3100_firmware:1.2.1
-
cpe:2.3:o:phoenixcontact:charx_sec-3100_firmware:1.3.0
-
cpe:2.3:o:phoenixcontact:charx_sec-3100_firmware:1.3.3
-
cpe:2.3:o:phoenixcontact:charx_sec-3100_firmware:1.4.1
-
cpe:2.3:o:phoenixcontact:charx_sec-3100_firmware:1.4.2
-
cpe:2.3:o:phoenixcontact:charx_sec-3100_firmware:1.5.0
-
cpe:2.3:o:phoenixcontact:charx_sec-3150_firmware:-
-
cpe:2.3:o:phoenixcontact:charx_sec-3150_firmware:1.2.1
-
cpe:2.3:o:phoenixcontact:charx_sec-3150_firmware:1.3.0
-
cpe:2.3:o:phoenixcontact:charx_sec-3150_firmware:1.3.3
-
cpe:2.3:o:phoenixcontact:charx_sec-3150_firmware:1.4.1
-
cpe:2.3:o:phoenixcontact:charx_sec-3150_firmware:1.4.2
-
cpe:2.3:o:phoenixcontact:charx_sec-3150_firmware:1.5.0