← Database
CVE-2025-25270
CRITICAL
CVSS: 9.8
Published: 2025-07-08
Modified: 2026-06-17
Description
An unauthenticated remote attacker can alter the device configuration in a way to get remote code execution as root with specific configurations.
Affected Platforms
Phoenixcontact Charx Sec-3000Phoenixcontact Charx Sec-3000 FirmwarePhoenixcontact Charx Sec-3050 FirmwarePhoenixcontact Charx Sec-3100Phoenixcontact Charx Sec-3150 FirmwarePhoenixcontact Charx Sec-3150Phoenixcontact Charx Sec-3050Phoenixcontact Charx Sec-3100 Firmware