CVE-2024-26004 - Vulnerability Details - OpenCVE

An unauthenticated remote attacker can DoS a control agent due to access of a uninitialized pointer which may prevent or disrupt the charging functionality.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

References

Link	Providers
https://cert.vde.com/en/advisories/VDE-2024-011

History

No history.

MITRE

Status: PUBLISHED

Assigner: CERTVDE

Published: 2024-03-12T08:12:38.367Z

Updated: 2024-08-01T23:52:06.500Z

Reserved: 2024-02-14T08:22:26.365Z

Link: CVE-2024-26004

Vulnrichment

Updated: 2024-08-01T23:52:06.500Z

NVD

Status : Awaiting Analysis

Published: 2024-03-12T09:15:09.357

Modified: 2024-11-21T09:01:45.330

Link: CVE-2024-26004

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-26004", "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "state": "PUBLISHED", "assignerShortName": "CERTVDE", "dateReserved": "2024-02-14T08:22:26.365Z", "datePublished": "2024-03-12T08:12:38.367Z", "dateUpdated": "2024-08-01T23:52:06.500Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "CHARX SEC-3000", "vendor": "PHOENIX CONTACT", "versions": [{"lessThanOrEqual": "1.5.0", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "CHARX SEC-3050", "vendor": "PHOENIX CONTACT", "versions": [{"lessThanOrEqual": "1.5.0", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "CHARX SEC-3100", "vendor": "PHOENIX CONTACT", "versions": [{"lessThanOrEqual": "1.5.0", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "CHARX SEC-3150", "vendor": "PHOENIX CONTACT", "versions": [{"lessThanOrEqual": "1.5.0", "status": "affected", "version": "0", "versionType": "semver"}]}], "credits": [{"lang": "en", "type": "finder", "user": "00000000-0000-4000-9000-000000000000", "value": "Jack Dates"}, {"lang": "en", "type": "reporter", "user": "00000000-0000-4000-9000-000000000000", "value": "RET2 Systems"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "An unauthenticated remote attacker can DoS a control agent due to access of a uninitialized pointer which may prevent or disrupt the charging functionality. "}], "value": "An unauthenticated remote attacker can DoS a control agent due to access of a uninitialized pointer\u00a0which may prevent or disrupt the charging functionality. "}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-824", "description": "CWE-824 Access of Uninitialized Pointer", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "shortName": "CERTVDE", "dateUpdated": "2024-03-12T08:12:38.367Z"}, "references": [{"url": "https://cert.vde.com/en/advisories/VDE-2024-011"}], "source": {"advisory": "VDE-2024-011", "defect": ["CERT@VDE#64650"], "discovery": "UNKNOWN"}, "title": "PHOENIX CONTACT: DoS of a control agent due to access of a uninitialized pointer\u00a0in CHARX Series", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"affected": [{"vendor": "phoenixcontact", "product": "charx_sec_3000", "cpes": ["cpe:2.3:a:phoenixcontact:charx_sec_3000:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "1.5.0", "versionType": "custom"}]}, {"vendor": "phoenixcontact", "product": "charx_sec_3050", "cpes": ["cpe:2.3:a:phoenixcontact:charx_sec_3050:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "1.5.0", "versionType": "custom"}]}, {"vendor": "phoenixcontact", "product": "charx_sec_3100", "cpes": ["cpe:2.3:a:phoenixcontact:charx_sec_3100:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "1.5.0", "versionType": "custom"}]}, {"vendor": "phoenixcontact", "product": "charx_sec_3150", "cpes": ["cpe:2.3:a:phoenixcontact:charx_sec_3150:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "1.5.0", "versionType": "custom"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-03-12T15:53:30.751365Z", "id": "CVE-2024-26004", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-28T01:52:12.052Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T23:52:06.500Z"}, "title": "CVE Program Container", "references": [{"url": "https://cert.vde.com/en/advisories/VDE-2024-011", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://cert.vde.com/en/advisories/VDE-2024-011", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T23:52:06.500Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-26004", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-03-12T15:53:30.751365Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:phoenixcontact:charx_sec_3000:*:*:*:*:*:*:*:*"], "vendor": "phoenixcontact", "product": "charx_sec_3000", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "1.5.0"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:phoenixcontact:charx_sec_3050:*:*:*:*:*:*:*:*"], "vendor": "phoenixcontact", "product": "charx_sec_3050", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "1.5.0"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:phoenixcontact:charx_sec_3100:*:*:*:*:*:*:*:*"], "vendor": "phoenixcontact", "product": "charx_sec_3100", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "1.5.0"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:phoenixcontact:charx_sec_3150:*:*:*:*:*:*:*:*"], "vendor": "phoenixcontact", "product": "charx_sec_3150", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "1.5.0"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-28T01:52:02.924Z"}}], "cna": {"title": "PHOENIX CONTACT: DoS of a control agent due to access of a uninitialized pointer\u00a0in CHARX Series", "source": {"defect": ["CERT@VDE#64650"], "advisory": "VDE-2024-011", "discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "user": "00000000-0000-4000-9000-000000000000", "value": "Jack Dates"}, {"lang": "en", "type": "reporter", "user": "00000000-0000-4000-9000-000000000000", "value": "RET2 Systems"}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "PHOENIX CONTACT", "product": "CHARX SEC-3000", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "1.5.0"}], "defaultStatus": "unaffected"}, {"vendor": "PHOENIX CONTACT", "product": "CHARX SEC-3050", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "1.5.0"}], "defaultStatus": "unaffected"}, {"vendor": "PHOENIX CONTACT", "product": "CHARX SEC-3100", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "1.5.0"}], "defaultStatus": "unaffected"}, {"vendor": "PHOENIX CONTACT", "product": "CHARX SEC-3150", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "1.5.0"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://cert.vde.com/en/advisories/VDE-2024-011"}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "An unauthenticated remote attacker can DoS a control agent due to access of a uninitialized pointer\u00a0which may prevent or disrupt the charging functionality. ", "supportingMedia": [{"type": "text/html", "value": "An unauthenticated remote attacker can DoS a control agent due to access of a uninitialized pointer which may prevent or disrupt the charging functionality. ", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-824", "description": "CWE-824 Access of Uninitialized Pointer"}]}], "providerMetadata": {"orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "shortName": "CERTVDE", "dateUpdated": "2024-03-12T08:12:38.367Z"}}}, "cveMetadata": {"cveId": "CVE-2024-26004", "state": "PUBLISHED", "dateUpdated": "2024-08-01T23:52:06.500Z", "dateReserved": "2024-02-14T08:22:26.365Z", "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "datePublished": "2024-03-12T08:12:38.367Z", "assignerShortName": "CERTVDE"}, "dataVersion": "5.1"}