Medium severity5.9NVD Advisory· Published Mar 12, 2024· Updated Jun 17, 2026
CVE-2024-26000
CVE-2024-26000
Description
An unauthenticated remote attacker can read memory out of bounds due to improper input validation in the MQTT stack. The brute force attack is not always successful because of memory randomization.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
8- cpe:2.3:o:phoenixcontact:charx_sec-3000_firmware:*:*:*:*:*:*:*:*Range: <1.5.1
- cpe:2.3:o:phoenixcontact:charx_sec-3050_firmware:*:*:*:*:*:*:*:*Range: <1.5.1
- cpe:2.3:o:phoenixcontact:charx_sec-3100_firmware:*:*:*:*:*:*:*:*Range: <1.5.1
- cpe:2.3:o:phoenixcontact:charx_sec-3150_firmware:*:*:*:*:*:*:*:*Range: <1.5.1
- PHOENIX CONTACT/CHARX SEC-3000v5Range: 0
- PHOENIX CONTACT/CHARX SEC-3050v5Range: 0
- PHOENIX CONTACT/CHARX SEC-3100v5Range: 0
- PHOENIX CONTACT/CHARX SEC-3150v5Range: 0
Patches
Vulnerability mechanics
References
1- cert.vde.com/en/advisories/VDE-2024-011nvdThird Party Advisory
News mentions
0No linked articles in our index yet.