An unauthenticated remote attacker can upload a arbitrary script file due to improper input validation. The upload destination is fixed and is write only.
| Software | From | Fixed in |
|---|---|---|
| phoenixcontact / charx_sec-3000_firmware | - | 1.5.1 |
| phoenixcontact / charx_sec-3050_firmware | - | 1.5.1 |
| phoenixcontact / charx_sec-3100_firmware | - | 1.5.1 |
| phoenixcontact / charx_sec-3150_firmware | - | 1.5.1 |