CVE-2024-26005CWE-459
PHOENIX CONTACT: Privilege gain through incomplete cleanup in CHARX Series
Medium · published March 12, 2024
What it is
An unauthenticated remote attacker can gain service level privileges through an incomplete cleanup during service restart after a DoS.
The record
Technical detail
- CVSS v3.1
- 4.8 · MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00621 · 49.1th percentile
- Weakness
- CWE-459 · Incomplete Cleanup
- Published
- 2024-03-12T08:12Z
EPSS history
Timeline