Skip to content
OpenAdvisories
High · 7.8 CVE-2025-24005 EUVD-2025-20406GHSA-6qp8-rj23-395g

Local Privilege Escalation via Vulnerable SSH Script

Published Jul 8, 2025 · Updated Jul 8, 2025 · Assigned by CERTVDE

Vendor: Phoenix Contact Product: CHARX SEC-3000 Product: CHARX SEC-3050 Product: CHARX SEC-3100 Product: CHARX SEC-3150 Category: ICS / OT

Description

A local attacker with a local user account can leverage a vulnerable script via SSH to escalate privileges to root due to improper input validation.

Affected products

VendorProductAffectedFixed
Phoenix Contact CHARX SEC-3150 0.0.0 – < 1.7.3 1.7.3
Phoenix Contact CHARX SEC-3100 0.0.0 – < 1.7.3 1.7.3
Phoenix Contact CHARX SEC-3050 0.0.0 – < 1.7.3 1.7.3
Phoenix Contact CHARX SEC-3000 0.0.0 – < 1.7.3 1.7.3

Advisories 1

References