CVE-2024-6788 PoC — Phoenix Contact: update feature from CHARX controller can be used to reset a low privilege user password

Source

https://github.com/zetraxz/CVE-2024-6788

Associated Vulnerability

Title:Phoenix Contact: update feature from CHARX controller can be used to reset a low privilege user password (CVE-2024-6788)
Description:A remote unauthenticated attacker can use the firmware update feature on the LAN interface of the device to reset the password for the predefined, low-privileged user “user-app” to the default password.

Readme

# CVE-2024-6788

## Overview

A remote unauthenticated attacker can use the firmware update feature on the LAN interface of the device to reset the password for the predefined, low-privileged user “user-app” to the default password.

## Vulnerability Details

- **ID**: CVE-2024-6788
- **Severity**: High
- **Tags**: python, cve, cve2024, cve-2024-6788

## Requirement

Python 3.9

### Sell Exploit:
[Download](https://ur0.jp/kQ7Ry)


Use this exploit in a controlled environment only.

For inquiries, please contact zetraxz@thesecure.biz

File Snapshot


 [4.0K]  /data/pocs/e89bb8c07a0f51c1504aab67efdab1dac1a423bc
└── [ 543]  README.md

0 directories, 1 file

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!