title: PHOENIX CONTACT: Out of bounds write only memory access
description: An unauthenticated remote attacker can write memory out of bounds due to improper input validation in the MQTT stack. The brute force attack is not always successful because of memory randomization.
problem types: CWE-20 Improper Input Validation
affected:
{
defaultStatus: unaffected
product: CHARX SEC-3000
vendor: PHOENIX CONTACT
versions:
lessThanOrEqual: 1.5.0, status: affected, version: 0, versionType: semver
}
{
defaultStatus: unaffected
product: CHARX SEC-3050
vendor: PHOENIX CONTACT
versions:
lessThanOrEqual: 1.5.0, status: affected, version: 0, versionType: semver
}
{
defaultStatus: unaffected
product: CHARX SEC-3100
vendor: PHOENIX CONTACT
versions:
lessThanOrEqual: 1.5.0, status: affected, version: 0, versionType: semver
}
{
defaultStatus: unaffected
product: CHARX SEC-3150
vendor: PHOENIX CONTACT
versions:
lessThanOrEqual: 1.5.0, status: affected, version: 0, versionType: semver
}
metrics:
cvssV3_1: [
attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.4
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H
version: 3.1
]
format: CVSS
scenarios: GENERAL