This vulnerability (CVE-2026-41032) affects Phoenix Contact CHARX SEC-3150 version 1.0.0 and involves an unauthenticated adjacent attacker being able to download log files from the controller. These log files may contain restricted or sensitive information, leading to an information disclosure issue categorized as CWE-200. The CVSS v3.1 base score is 7.5, reflecting high severity due to network attack vector, no privileges required, and no user interaction needed. The vulnerability is publicly disclosed but lacks an official fix or vendor advisory specifying remediation steps. The product is not a cloud service, so remediation responsibility lies with the vendor and end users.

An attacker with adjacent network access can retrieve sensitive log files from the CHARX SEC-3150 controller without authentication. This unauthorized information disclosure could aid further attacks or leak confidential operational data. There is no impact on integrity or availability reported. No known exploits have been observed in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict network access to the device to trusted parties only, especially limiting adjacent network exposure. Monitor vendor communications for updates on official patches or mitigations.