← Database
CVE-2025-25268
HIGH
CVSS: 8.8
Published: 2025-07-08
Modified: 2026-06-17
Description
An unauthenticated adjacent attacker can modify configuration by sending specific requests to an API-endpoint resulting in read and write access due to missing authentication.
Affected Platforms
Phoenixcontact Charx Sec-3000Phoenixcontact Charx Sec-3000 FirmwarePhoenixcontact Charx Sec-3050 FirmwarePhoenixcontact Charx Sec-3100Phoenixcontact Charx Sec-3150 FirmwarePhoenixcontact Charx Sec-3150Phoenixcontact Charx Sec-3050Phoenixcontact Charx Sec-3100 Firmware