Skip to content
OpenAdvisories
High · 7.8 CVE-2025-24006 EUVD-2025-20405GHSA-7593-ffm6-6g6c

Privilege Escalation via Insecure SSH Permissions

Published Jul 8, 2025 · Updated Jul 8, 2025 · Assigned by CERTVDE

Vendor: Phoenix Contact Product: CHARX SEC-3000 Product: CHARX SEC-3050 Product: CHARX SEC-3100 Product: CHARX SEC-3150 Category: ICS / OT

Description

A low privileged local attacker can leverage insecure permissions via SSH on the affected devices to escalate privileges to root.

Affected products

VendorProductAffectedFixed
Phoenix Contact CHARX SEC-3150 0.0.0 – < 1.7.3 1.7.3
Phoenix Contact CHARX SEC-3100 0.0.0 – < 1.7.3 1.7.3
Phoenix Contact CHARX SEC-3050 0.0.0 – < 1.7.3 1.7.3
Phoenix Contact CHARX SEC-3000 0.0.0 – < 1.7.3 1.7.3

Advisories 1

References