This vulnerability is a command injection flaw caused by improper neutralization of special elements within the idledisconnect parameter of the SCM interface. An unauthenticated remote attacker can inject arbitrary shell commands that are executed with root privileges on the affected device. The flaw is classified as CWE‑77 and allows total compromise of confidentiality, integrity, and availability.

Affected devices are the Phoenix Contact CHARX SEC‑3000, CHARX SEC‑3050, CHARX SEC‑3100, and CHARX SEC‑3150 series. No specific firmware or software revisions are mentioned, so all current releases of these models are potentially vulnerable until a patch is applied.

The CVSS score of 9.3 marks the flaw as critical, while the EPSS score of less than 1 % suggests a low likelihood of exploitation at present. The vulnerability is not listed in CISA’s KEV catalog. An attacker must directly communicate with the SCM interface and supply a crafted idledisconnect parameter to trigger the injection; no authentication is required, indicating a high level of accessibility. If exploited, the attacker gains unrestricted root access and could manipulate any system component, installing malware, exfiltrating data, or disrupting operations.