High severity8.4NVD Advisory· Published Jul 8, 2025· Updated Jun 17, 2026

CVE-2025-25269

Description

An unauthenticated local attacker can inject a command that is subsequently executed as root, leading to a privilege escalation.

LLM-synthesized narrative grounded in this CVE's description and references.

Phoenixcontact/Charx Sec 3000 Firmware
cpe:2.3:o:phoenixcontact:charx_sec-3000_firmware:*:*:*:*:*:*:*:*
Range: <1.7.3
Phoenixcontact/Charx Sec 3050 Firmware
cpe:2.3:o:phoenixcontact:charx_sec-3050_firmware:*:*:*:*:*:*:*:*
Range: <1.7.3
Phoenixcontact/Charx Sec 3100 Firmware
cpe:2.3:o:phoenixcontact:charx_sec-3100_firmware:*:*:*:*:*:*:*:*
Range: <1.7.3
Phoenixcontact/Charx Sec 3150 Firmware
cpe:2.3:o:phoenixcontact:charx_sec-3150_firmware:*:*:*:*:*:*:*:*
Range: <1.7.3
Phoenix Contact/CHARX SEC-3000v5
Range: 0.0.0
Phoenix Contact/CHARX SEC-3050v5
Range: 0.0.0
Phoenix Contact/CHARX SEC-3100v5
Range: 0.0.0
Phoenix Contact/CHARX SEC-3150v5
Range: 0.0.0