Remote Code Execution Vulnerability in Affected Device Configuration by Vendor
CVE-2025-25270
9.8CRITICAL
What is CVE-2025-25270?
This vulnerability allows an unauthenticated remote attacker to exploit specific configurations in the affected device, potentially enabling unauthorized modifications to its settings. Such misconfigurations could lead to remote code execution as root, providing the attacker with elevated privileges and control over the device. Organizations using the affected product should prioritize patching and implementing security measures to mitigate the risks associated with this vulnerability.
Affected Version(s)
CHARX SEC-3000 0.0.0 < 1.7.3
CHARX SEC-3050 0.0.0 < 1.7.3
CHARX SEC-3100 0.0.0 < 1.7.3