NetSight
high7.8

CVE-2025-24006

A low privileged local attacker can leverage insecure permissions via SSH on the affected devices to escalate privileges to root.

Impact

A low privileged local attacker can leverage insecure permissions via SSH on the affected devices to escalate privileges to root.

Affected products

VendorProductAffected versions
PhoenixcontactCharx Sec-3000 Firmware
before 1.7.3
PhoenixcontactCharx Sec-3050 Firmware
before 1.7.3
PhoenixcontactCharx Sec-3100 Firmware
before 1.7.3
PhoenixcontactCharx Sec-3150 Firmware
before 1.7.3

Weakness classification

References