High severity8.4NVD Advisory· Published Jul 8, 2025· Updated Jun 17, 2026
CVE-2025-25269
CVE-2025-25269
Description
An unauthenticated local attacker can inject a command that is subsequently executed as root, leading to a privilege escalation.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
8cpe:2.3:o:phoenixcontact:charx_sec-3000_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:phoenixcontact:charx_sec-3000_firmware:*:*:*:*:*:*:*:*range: <1.7.3
- (no CPE)range: 0.0.0
cpe:2.3:o:phoenixcontact:charx_sec-3050_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:phoenixcontact:charx_sec-3050_firmware:*:*:*:*:*:*:*:*range: <1.7.3
- (no CPE)range: 0.0.0
cpe:2.3:o:phoenixcontact:charx_sec-3100_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:phoenixcontact:charx_sec-3100_firmware:*:*:*:*:*:*:*:*range: <1.7.3
- (no CPE)range: 0.0.0
cpe:2.3:o:phoenixcontact:charx_sec-3150_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:phoenixcontact:charx_sec-3150_firmware:*:*:*:*:*:*:*:*range: <1.7.3
- (no CPE)range: 0.0.0
Patches
Vulnerability mechanics
References
1- certvde.com/de/advisories/VDE-2025-019nvdThird Party Advisory
News mentions
0No linked articles in our index yet.