CVE-2025-25269 An unauthenticated local attacker can inject a command that is subsequently executed as root, leading to a privilege…

Description

An unauthenticated local attacker can inject a command that is subsequently executed as root, leading to a privilege escalation.

Affected products and versions

Product	Affected versions	Fixed in
CHARX SEC-3150 0.0	0.0.0 → < 1.7.3	1.7.3
CHARX SEC-3100 0.0	0.0.0 → < 1.7.3	1.7.3
CHARX SEC-3050 0.0	0.0.0 → < 1.7.3	1.7.3
CHARX SEC-3000 0.0	0.0.0 → < 1.7.3	1.7.3

Other CVEs of CHARX SEC-3150

The 51 CVEs of CHARX SEC-3150 →

CVE-2026-7849 Due to improper neutralization of special elements, an unauthenticated remote attacker is able to inject a command… 9.3 Critical CVE-2026-44108 Due to a flaw in the execution order of scripts during shutdown, the firewall is terminated prematurely during system… 9.3 Critical CVE-2026-44107 A reboot of the charging controller can be triggered via Modbus TCP without authentication 8.7 High CVE-2026-44105 The credentials for the local user "user-app" may be exposed in log files, potentially enabling a low-privileged local… 5.8 Medium