CVE-2024-28134

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-28134
An unauthenticated remote attacker can extract a session token with a MitM attack and gain web-based management access with the privileges of the currently logged in user due to cleartext transmission of sensitive information. No additional user interaction is required. The access is limited as only non-sensitive information can be obtained but the availability can be seriously affected. 

7.0 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.2 / Impact : 4.7

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://cert.vde.com/en/advisories/VDE-2024-019 Third Party Advisory
https://cert.vde.com/en/advisories/VDE-2024-019 Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:phoenixcontact:charx_sec-3000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:charx_sec-3000:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:phoenixcontact:charx_sec-3050_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:charx_sec-3050:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:phoenixcontact:charx_sec-3100_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:charx_sec-3100:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:phoenixcontact:charx_sec-3150_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:charx_sec-3150:-:*:*:*:*:*:*:*
History

23 Jan 2025, 18:53

Type Values Removed Values Added
References () https://cert.vde.com/en/advisories/VDE-2024-019 - () https://cert.vde.com/en/advisories/VDE-2024-019 - Third Party Advisory
First Time Phoenixcontact
Phoenixcontact charx Sec-3100 Firmware
Phoenixcontact charx Sec-3000 Firmware
Phoenixcontact charx Sec-3100
Phoenixcontact charx Sec-3050 Firmware
Phoenixcontact charx Sec-3050
Phoenixcontact charx Sec-3150
Phoenixcontact charx Sec-3150 Firmware
Phoenixcontact charx Sec-3000
CPE cpe:2.3:o:phoenixcontact:charx_sec-3050_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:phoenixcontact:charx_sec-3000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:phoenixcontact:charx_sec-3100_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:charx_sec-3000:-:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:charx_sec-3100:-:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:charx_sec-3050:-:*:*:*:*:*:*:*
cpe:2.3:o:phoenixcontact:charx_sec-3150_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:charx_sec-3150:-:*:*:*:*:*:*:*

21 Nov 2024, 09:05

Type Values Removed Values Added
Summary
  • (es) Un atacante remoto no autenticado puede extraer un token de sesión con un ataque MitM y obtener acceso de administración basado en web con los privilegios del usuario actualmente conectado debido a la transmisión de texto plano de información confidencial. No se requiere interacción adicional del usuario. El acceso es limitado ya que sólo se puede obtener información no confidencial pero la disponibilidad puede verse seriamente afectada.
References () https://cert.vde.com/en/advisories/VDE-2024-019 - () https://cert.vde.com/en/advisories/VDE-2024-019 -

14 May 2024, 16:16

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-14 16:16

Updated : 2025-01-23 18:53

NVD link : CVE-2024-28134

Mitre link : CVE-2024-28134

CVE.ORG link : CVE-2024-28134

JSON object : View

Products Affected

phoenixcontact

  • charx_sec-3000
  • charx_sec-3150_firmware
  • charx_sec-3050_firmware
  • charx_sec-3000_firmware
  • charx_sec-3150
  • charx_sec-3050
  • charx_sec-3100_firmware
  • charx_sec-3100
CWE
CWE-319

Cleartext Transmission of Sensitive Information