Local Privilege Escalation Vulnerability in Affected Product by Vendor
CVE-2025-24005

7.8HIGH

Key Information:

Vendor

Phoenix Contact

Status
Charx Sec-3150
Charx Sec-3100
Charx Sec-3050
Charx Sec-3000
Vendor
CVE Published:
8 July 2025

What is CVE-2025-24005?

A local attacker with access to a user account can exploit a vulnerability in the affected script through SSH, allowing them to escalate their privileges to root level. This issue arises from improper input validation, potentially leading to unauthorized access and control over the affected system.

Affected Version(s)

CHARX SEC-3000 0.0.0 < 1.7.3

CHARX SEC-3050 0.0.0 < 1.7.3

CHARX SEC-3100 0.0.0 < 1.7.3

References

https://certvde.com/de/advisories/VDE-2025-014

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Jesson Soto Ventura
Matthew Waddell
.
CVE-2025-24005 : Local Privilege Escalation Vulnerability in Affected Product by Vendor