CVE-2024-6788 PoC — Phoenix Contact: update feature from CHARX controller can be used to reset a low privilege user password

Source

https://github.com/zetraxz/CVE-2024-6788

Associated Vulnerability

Title: Phoenix Contact: update feature from CHARX controller can be used to reset a low privilege user password (CVE-2024-6788)
Description:A remote unauthenticated attacker can use the firmware update feature on the LAN interface of the device to reset the password for the predefined, low-privileged user “user-app” to the default password.

Readme

# CVE-2024-6788

## Overview

A remote unauthenticated attacker can use the firmware update feature on the LAN interface of the device to reset the password for the predefined, low-privileged user “user-app” to the default password.

## Vulnerability Details

- **ID**: CVE-2024-6788
- **Severity**: High
- **Tags**: python, cve, cve2024, cve-2024-6788

## Requirement

Python 3.9

### Sell Exploit:
[Download](https://ur0.jp/kQ7Ry)


Use this exploit in a controlled environment only.

For inquiries, please contact zetraxz@thesecure.biz

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →