← CVE Intelligence

CVE-2025-25270

Remote Code Execution via Unauthenticated Configuration Manipulation PUBLISHED

Description (CNA)

An unauthenticated remote attacker can alter the device configuration in a way to get remote code execution as root with specific configurations.

Affected (CNA)

Vendor / productVersions
Phoenix Contact / CHARX SEC-3150affected 0.0.0 before 1.7.3
Phoenix Contact / CHARX SEC-3100affected 0.0.0 before 1.7.3
Phoenix Contact / CHARX SEC-3050affected 0.0.0 before 1.7.3
Phoenix Contact / CHARX SEC-3000affected 0.0.0 before 1.7.3

CWE

CWE-913

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.