An unauthenticated adjacent attacker is able to configure a new OCPP backend, due to insecure defaults for the configuration interface.
| Software | From | Fixed in |
|---|---|---|
| phoenixcontact / charx_sec-3000_firmware | - | 1.7.3 |
| phoenixcontact / charx_sec-3050_firmware | - | 1.7.3 |
| phoenixcontact / charx_sec-3100_firmware | - | 1.7.3 |
| phoenixcontact / charx_sec-3150_firmware | - | 1.7.3 |