High severity7.4NVD Advisory· Published Mar 12, 2024· Updated Jun 17, 2026
CVE-2024-26001
CVE-2024-26001
Description
An unauthenticated remote attacker can write memory out of bounds due to improper input validation in the MQTT stack. The brute force attack is not always successful because of memory randomization.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
8- cpe:2.3:o:phoenixcontact:charx_sec-3000_firmware:*:*:*:*:*:*:*:*Range: <1.5.1
- cpe:2.3:o:phoenixcontact:charx_sec-3050_firmware:*:*:*:*:*:*:*:*Range: <1.5.1
- cpe:2.3:o:phoenixcontact:charx_sec-3100_firmware:*:*:*:*:*:*:*:*Range: <1.5.1
- cpe:2.3:o:phoenixcontact:charx_sec-3150_firmware:*:*:*:*:*:*:*:*Range: <1.5.1
- PHOENIX CONTACT/CHARX SEC-3000v5Range: 0
- PHOENIX CONTACT/CHARX SEC-3050v5Range: 0
- PHOENIX CONTACT/CHARX SEC-3100v5Range: 0
- PHOENIX CONTACT/CHARX SEC-3150v5Range: 0
Patches
Vulnerability mechanics
References
1- cert.vde.com/en/advisories/VDE-2024-011nvdThird Party Advisory
News mentions
0No linked articles in our index yet.