High severity8.6NVD Advisory· Published Aug 13, 2024· Updated Jun 17, 2026
CVE-2024-6788
CVE-2024-6788
Description
A remote unauthenticated attacker can use the firmware update feature on the LAN interface of the device to reset the password for the predefined, low-privileged user “user-app” to the default password.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
8- cpe:2.3:o:phoenixcontact:charx_sec-3000_firmware:*:*:*:*:*:*:*:*Range: <1.6.3
- cpe:2.3:o:phoenixcontact:charx_sec-3050_firmware:*:*:*:*:*:*:*:*Range: <1.6.3
- cpe:2.3:o:phoenixcontact:charx_sec-3100_firmware:*:*:*:*:*:*:*:*Range: <1.6.3
- cpe:2.3:o:phoenixcontact:charx_sec-3150_firmware:*:*:*:*:*:*:*:*Range: <1.6.3
- PHOENIX CONTACT/CHARX SEC-3000v5Range: 0
- PHOENIX CONTACT/CHARX SEC-3050v5Range: 0
- PHOENIX CONTACT/CHARX SEC-3100v5Range: 0
- PHOENIX CONTACT/CHARX SEC-3150v5Range: 0
Patches
Vulnerability mechanics
References
1- cert.vde.com/en/advisories/VDE-2024-022nvdThird Party Advisory
News mentions
0No linked articles in our index yet.