PT-2026-66435 · Phoenix Contact · Charx Sec-3000+3

CVE-2026-44107 · Publicado 2026-07-30 · Atualizado 2026-07-30

Mitre

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

A reboot of the charging controller can be triggered via Modbus TCP without authentication. Therefore, when the Modbus functionality is enabled by opening the port that CharxModbusServer is listening, an unauthenticated attacker can perform a Denial-of-Service attack.

Correção

Enumeração de Fraquezas

CWE-749

Identificadores relacionados

CVE-2026-44107

Produtos afetados

Charx Sec-3000

Charx Sec-3050

Charx Sec-3100

Charx Sec-3150

Referências · 2

• https://certvde.com/en/advisories/VDE-2026-008 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-44107 · Nota de Segurança