CVE-2024-28137
PHOENIX CONTACT: privilege escalation due to a TOCTOU vulnerability in the CHARX Series
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
PHOENIX CONTACT: privilege escalation due to a TOCTOU vulnerability in the CHARX Series
| Assigner | CERTVDE |
| Reserved | 2024-03-05 |
| Published | 2024-05-14 |
| Updated | 2024-08-02 |
A local attacker with low privileges can perform a privilege escalation with an init script due to a TOCTOU vulnerability.
| CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition
Trend Micro's Zero Day Initiative
Todd Manning
https://cert.vde.com/en/advisories/VDE-2024-019
