THE page discusses critical vulnerabilities in Phoenix Contact's CHARX SEC-3xxx EV charging controllers, numbering 20 CVEs, with several deemed critical. The highest severity rating is 9.8, linked to command injection and missing authentication vulnerabilities. No confirmed exploits have been reported, but the flaws could allow attackers to gain full control of charging stations. The recommended patch is firmware version 1.9.1, which addresses all vulnerabilities.
The advisory emphasizes the importance of applying updates promptly to mitigate risks. Furthermore, it suggests keeping the charging stations in a closed network behind a firewall until the updates are applied.