Vulnerability in Phoenix Contact Charx Sec-3000
CVE-2026-44107
A reboot of the charging controller can be triggered via Modbus TCP without authentication. Therefore, when the Modbus functionality is enabled by opening the port that CharxModbusServer is listening, an unauthenticated attacker can perfor…
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Phoenix Contact Charx Sec-3000 — versions 1.0.0
- Phoenix Contact Charx Sec-3050 — versions 1.0.0
- Phoenix Contact Charx Sec-3100 — versions 1.0.0
- Phoenix Contact Charx Sec-3150 — versions 1.0.0
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2026-44107?
- CVE-2026-44107 is a high-severity vulnerability in Phoenix Contact Charx Sec-3000, classified under CWE-749. CVSS score: 7.5/10. Published 2026-07-30.
- How severe is CVE-2026-44107?
- High severity. CVSS v3 base score is 7.5 out of 10.