CVE-2026-44090: CWE-306 Missing Authentication for Critical Function in Phoenix Contact CHARX SEC-3150
CVE-2026-44090 is a critical vulnerability in Phoenix Contact CHARX SEC-3150 version 1.0.0 where missing authentication allows unauthenticated remote attackers to access the MQTT broker. The broker is only protected by a firewall from external access. Exploitation could lead to full compromise of the device.
AI Analysis
Technical Summary
This vulnerability (CWE-306) arises from the absence of authentication controls on the MQTT broker component of the Phoenix Contact CHARX SEC-3150 device, version 1.0.0. An unauthenticated remote attacker can connect to the MQTT broker, which is only shielded by a firewall, potentially bypassing network restrictions. This lack of authentication may allow the attacker to fully compromise the device. The CVSS 4.0 base score is 9.3, indicating critical severity with network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. No official patch or remediation has been documented yet.
Potential Impact
An unauthenticated remote attacker can access the MQTT broker and potentially gain full control over the CHARX SEC-3150 device. This could lead to complete compromise of the device's functionality and data confidentiality, integrity, and availability.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, network-level protections such as restricting access to the MQTT broker beyond the firewall and monitoring for unauthorized connections are recommended.
CVE-2026-44090: CWE-306 Missing Authentication for Critical Function in Phoenix Contact CHARX SEC-3150
Description
CVE-2026-44090 is a critical vulnerability in Phoenix Contact CHARX SEC-3150 version 1.0.0 where missing authentication allows unauthenticated remote attackers to access the MQTT broker. The broker is only protected by a firewall from external access. Exploitation could lead to full compromise of the device.
CVSS v4.0
Score 9.3critical
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability (CWE-306) arises from the absence of authentication controls on the MQTT broker component of the Phoenix Contact CHARX SEC-3150 device, version 1.0.0. An unauthenticated remote attacker can connect to the MQTT broker, which is only shielded by a firewall, potentially bypassing network restrictions. This lack of authentication may allow the attacker to fully compromise the device. The CVSS 4.0 base score is 9.3, indicating critical severity with network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. No official patch or remediation has been documented yet.
Potential Impact
An unauthenticated remote attacker can access the MQTT broker and potentially gain full control over the CHARX SEC-3150 device. This could lead to complete compromise of the device's functionality and data confidentiality, integrity, and availability.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, network-level protections such as restricting access to the MQTT broker beyond the firewall and monitoring for unauthorized connections are recommended.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- CERTVDE
- Date Reserved
- 2026-05-05T10:48:08.225Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a6afbbf9c2644c7f8b72334
Added to database: 07/30/2026, 07:22:39 UTC
Last enriched: 07/30/2026, 07:40:55 UTC
Last updated: 07/30/2026, 07:57:54 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.