CVE-2025-24006
published 2025-07-08CVE-2025-24006: A low privileged local attacker can leverage insecure permissions via SSH on the affected devices to escalate privileges to root.
high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
A low privileged local attacker can leverage insecure permissions via SSH on the affected devices to escalate privileges to root.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| phoenix_contact | charx_sec-3000 | >= 0.0.0 < 1.7.3 | 1.7.3 |
| phoenix_contact | charx_sec-3050 | >= 0.0.0 < 1.7.3 | 1.7.3 |
| phoenix_contact | charx_sec-3100 | >= 0.0.0 < 1.7.3 | 1.7.3 |
| phoenix_contact | charx_sec-3150 | >= 0.0.0 < 1.7.3 | 1.7.3 |
| phoenixcontact | charx_sec-3000_firmware | < 1.7.3 | 1.7.3 |
| phoenixcontact | charx_sec-3050_firmware | < 1.7.3 | 1.7.3 |
| phoenixcontact | charx_sec-3100_firmware | < 1.7.3 | 1.7.3 |
| phoenixcontact | charx_sec-3150_firmware | < 1.7.3 | 1.7.3 |