CVE-2024-26288CWE-319

PHOENIX CONTACT: Lack of SSL support in CHARX Series

High · published March 12, 2024

CVSS v3.1
8.7
EPSS
0%
Percentile
22.5
In the wild
Unconfirmed
What it is

An unauthenticated remote attacker can influence the communication due to the lack of encryption of sensitive data via a MITM. Charging is not affected.

The record
Technical detail
CVSS v3.1
8.7 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00309 · 22.5th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2024-03-12T08:13Z
EPSS history
Timeline
  • 12 MAR 08:13Z
    PHOENIX CONTACT: Lack of SSL support in CHARX Series
    cvelistv5