A local low privileged attacker can use an untrusted search path in a CHARX system utility to gain root privileges.
| Software | From | Fixed in |
|---|---|---|
| phoenixcontact / charx_sec-3000_firmware | - | 1.5.1.x |
| phoenixcontact / charx_sec-3050_firmware | - | 1.5.1.x |
| phoenixcontact / charx_sec-3100_firmware | - | 1.5.1.x |
| phoenixcontact / charx_sec-3150_firmware | - | 1.5.1.x |