High severity8.4NVD Advisory· Published Jul 8, 2025· Updated Jun 17, 2026

CVE-2025-25269

Description

An unauthenticated local attacker can inject a command that is subsequently executed as root, leading to a privilege escalation.

LLM-synthesized narrative grounded in this CVE's description and references.

Phoenixcontact/Charx Sec 3150 Firmwarecpe-rescue2 versions
0.0.0+ 1 more
- (no CPE)range: 0.0.0
- cpe:2.3:o:phoenixcontact:charx_sec-3150_firmware:*:*:*:*:*:*:*:*range: <1.7.3
Phoenixcontact/Charx Sec 3100 Firmwarecpe-rescue2 versions
0.0.0+ 1 more
- (no CPE)range: 0.0.0
- cpe:2.3:o:phoenixcontact:charx_sec-3100_firmware:*:*:*:*:*:*:*:*range: <1.7.3
Phoenixcontact/Charx Sec 3050 Firmwarecpe-rescue2 versions
0.0.0+ 1 more
- (no CPE)range: 0.0.0
- cpe:2.3:o:phoenixcontact:charx_sec-3050_firmware:*:*:*:*:*:*:*:*range: <1.7.3
Phoenixcontact/Charx Sec 3000 Firmwarecpe-rescue2 versions
0.0.0+ 1 more
- (no CPE)range: 0.0.0
- cpe:2.3:o:phoenixcontact:charx_sec-3000_firmware:*:*:*:*:*:*:*:*range: <1.7.3