CVE-2026-44094
Deferred Deferred - Pending Action

Unauthenticated Firmware Fallback in Milesight AIOT Camera

Publication date: 2026-07-30

Last updated on: 2026-07-30

Assigner: CERT VDE

Description
An unauthenticated remote attacker can enforce the system to fall back to a firmware partition with an insecure configuration including default credentials. This could allow the attacker to gain SSH access to the system as an unprivileged user "user-app". Charging could be interrupted.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-30
Last Modified
2026-07-30
Generated
2026-08-19
AI Q&A
2026-07-30
EPSS Evaluated
2026-08-18
NVD
CVE-2026-44094
EUVD
EUVD-2026-51029

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
phoenix_contact charx_sec-3xxx to 1.9.1 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-636 When the product encounters an error condition or failure, its design requires it to fall back to a state that is less secure than other options that are available, such as selecting the weakest encryption algorithm or using the most permissive access control restrictions.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

An unauthenticated remote attacker can force the system to use a firmware partition with weak security settings, including default login credentials. This allows the attacker to gain SSH access as a low-privilege user named 'user-app' and potentially disrupt charging operations.

Detection Guidance

To detect this vulnerability, check the firmware version of Phoenix Contact CHARX SEC-3xxx devices. If the firmware version is prior to 1.9.1, the system is vulnerable. Use network scanning tools to identify devices running older firmware versions.

Impact Analysis

Attackers could gain unauthorized access to the charging controller, steal data, or interrupt charging services. The system could be used as a foothold to launch further attacks on connected networks.

Compliance Impact

This vulnerability could lead to unauthorized access to charging systems, potentially exposing sensitive data or interrupting services. Such breaches may violate compliance requirements under GDPR or HIPAA if personal or health-related data is involved, depending on the system's use case and data handling.

Mitigation Strategies

Update the firmware of Phoenix Contact CHARX SEC-3xxx EV charging controllers to version 1.9.1 or later to address the vulnerability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-44094. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart