This vulnerability in Phoenix Contact CHARX SEC-3150 (version 1.0.0) allows an unauthenticated remote attacker to trigger a fallback to a firmware partition configured insecurely with default credentials. This fallback enables the attacker to gain SSH access as the 'user-app' unprivileged user. Additionally, the attacker could interrupt the charging process. The root cause is a failure to fail securely (CWE-636), meaning the system does not maintain secure configurations when encountering errors or fallback conditions. The CVSS 4.0 base score is 8.3, reflecting high severity with network attack vector, no privileges required, no user interaction, and partial impacts on confidentiality, integrity, and high impact on availability.

An attacker can gain unauthorized SSH access to the device as an unprivileged user by exploiting the fallback to an insecure firmware partition with default credentials. This access could allow disruption of charging operations, impacting availability. Confidentiality and integrity impacts are low to limited, but availability impact is high due to potential charging interruption.

No official patch or remediation is currently available for this vulnerability. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is provided, restrict network access to the device to trusted sources only to reduce exposure. Monitor for any unusual device behavior indicative of fallback to insecure firmware partitions.