CVE-2025-24006 HIGH

CVE-2025-24006: Privilege Escalation via Insecure SSH Permissions

Vendor Phoenix Contact

Product CHARX SEC-3150

Weakness CWE-269

Published July 8, 2025

Last update July 8, 2025

View on NVD All CVEs

CVSS base score

7.8/10

Attack vector Local

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

A low privileged local attacker can leverage insecure permissions via SSH on the affected devices to escalate privileges to root.

Key dates

02Disclosure timeline

July 8, 2025 CVE published

July 8, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-24006 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/269.html

Related vulnerabilities

Identifiers

CVE CVE-2025-24006

CWE CWE-269

CVSS 7.8 / HIGH

Affected versions

Vendor Phoenix Contact

Product CHARX SEC-3150

Affected ≥ 0.0.0 and < 1.7.3

Vendor Phoenix Contact

Product CHARX SEC-3100

Affected ≥ 0.0.0 and < 1.7.3

Vendor Phoenix Contact

Product CHARX SEC-3050

Affected ≥ 0.0.0 and < 1.7.3

Vendor Phoenix Contact

Product CHARX SEC-3000

Affected ≥ 0.0.0 and < 1.7.3

CVE-2025-24006: Privilege Escalation via Insecure SSH Permissions

01Description

02Disclosure timeline

03References

04Related CVE