CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 00:32.

Filters

1 active

Reset filters

Search: VDE-2026-008

Vendor

Protocol

Sector

Severity

Source

1 advisories found

VDE-2026-008

Phoenix Contact: Multiple vulnerabilities in the firmware of CHARX SEC3xxx charging controllers

Phoenix Contact — CHARX SEC

Phoenix Contact PSIRTcritical

Published

30 July 2026

Last update

30 July 2026

Linked CVEs

CVE-2026-44090 CVE-2026-44091 CVE-2026-44092 CVE-2026-44093 CVE-2026-44094 CVE-2026-44095 CVE-2026-44096 CVE-2026-44097

Affected sectors

Risk evaluation

Multiple vulnerabilities have been identified in the firmware of CHARX SEC-3xxx EV charging controllers, including the CHARX SEC-3000, SEC-3050, SEC-3100, and SEC-3150 models. The flaws could allow attackers to compromise the devices remotely, resulting in a complete loss of confidentiality, integrity, and availability.

Mitigation summary

Phoenix Contact strongly recommends to upgrade to firmware version 1.9.1 which fixes these vulnerabilities.

Revision history (1)

Initial publication — 30 July 2026
Initial revision.

Official source: Phoenix Contact PSIRT