CVE-2025-24005

🗓️ 08 Jul 2025 06:59:45Reported by CERTVDEType

Local attacker can escalate privileges to root via a vulnerable SSH script due to input validation issues.

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2025-24005	8 Jul 202507:08	–	circl
CNNVD	PHOENIX CONTACT CHARX SEC 输入验证错误漏洞	8 Jul 202500:00	–	cnnvd
Cvelist	CVE-2025-24005 Local Privilege Escalation via Vulnerable SSH Script	8 Jul 202506:59	–	cvelist
EUVD	EUVD-2025-20406	3 Oct 202520:07	–	euvd
NVD	CVE-2025-24005	8 Jul 202507:15	–	nvd
Positive Technologies	PT-2025-28343 · Phoenix Contact · Charx Sec-3000 +7	8 Jul 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-24005	10 Jul 202507:24	–	redhatcve
Vulnrichment	CVE-2025-24005 Local Privilege Escalation via Vulnerable SSH Script	8 Jul 202506:59	–	vulnrichment

NVD

Vulners

Node

phoenixcontact charx_sec-3000_firmwareRange<1.7.3

AND

phoenixcontact charx_sec-3000Match-

Node

phoenixcontact charx_sec-3050_firmwareRange<1.7.3

AND

phoenixcontact charx_sec-3050Match-

Node

phoenixcontact charx_sec-3100_firmwareRange<1.7.3

AND

phoenixcontact charx_sec-3100Match-

Node

phoenixcontact charx_sec-3150_firmwareRange<1.7.3

AND

phoenixcontact charx_sec-3150Match-

[
  {
    "defaultStatus": "unaffected",
    "product": "CHARX SEC-3150",
    "vendor": "Phoenix Contact",
    "versions": [
      {
        "lessThan": "1.7.3",
        "status": "affected",
        "version": "0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "CHARX SEC-3100",
    "vendor": "Phoenix Contact",
    "versions": [
      {
        "lessThan": "1.7.3",
        "status": "affected",
        "version": "0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "CHARX SEC-3050",
    "vendor": "Phoenix Contact",
    "versions": [
      {
        "lessThan": "1.7.3",
        "status": "affected",
        "version": "0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "CHARX SEC-3000",
    "vendor": "Phoenix Contact",
    "versions": [
      {
        "lessThan": "1.7.3",
        "status": "affected",
        "version": "0.0.0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
certvde	www.certvde.com/de/advisories/VDE-2025-014

11 Jul 2025 14:36Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.17.8

EPSS0.00069

SSVC

CWE-20