The vulnerability of microprogrammed software in modular control devices for AC charging stations and wall-mounted charging devices from Phoenix Contact’s CHARX SEC-3000 models lies in the lack of measures taken to neutralize special elements. This allows intruders to exploit their privileges.

CHARX SEC-3000 devices lack measures to neutralize special elements, enabling privilege escalation.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2025-25269	8 Jul 202507:09	–	circl
CNNVD	PHOENIX CONTACT多款产品操作系统命令注入漏洞	8 Jul 202500:00	–	cnnvd
CVE	CVE-2025-25269	8 Jul 202507:00	–	cve
Cvelist	CVE-2025-25269 Local Privilege Escalation via Unauthenticated Command Injection	8 Jul 202507:00	–	cvelist
EUVD	EUVD-2025-20403	3 Oct 202520:07	–	euvd
NVD	CVE-2025-25269	8 Jul 202507:15	–	nvd
OSV	CVE-2025-25269	8 Jul 202507:15	–	osv
Positive Technologies	PT-2025-28346 · Phoenix Contact · Charx Sec-3000 +7	8 Jul 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-25269	10 Jul 202507:24	–	redhatcve
Vulnrichment	CVE-2025-25269 Local Privilege Escalation via Unauthenticated Command Injection	8 Jul 202507:00	–	vulnrichment