PT-2025-41859 · Phoenix Contact · Charx Sec-3000+3

Ryo Kato · Published 2025-10-14 · Updated 2025-10-19 · CVE-2025-41699

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. (affected versions not specified)

Description A flaw exists in a web-based management interface that allows a low-privileged remote attacker with an account to execute arbitrary commands with root privileges. This is achieved through a command injection resulting from improper control of code generation. The issue can lead to a total loss of confidentiality, availability, and integrity.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2025-41699

Affected Products

Charx Sec-3000

Charx Sec-3050

Charx Sec-3100

Charx Sec-3150

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-41699 · Security Note
• https://twitter.com/VulmonFeeds/status/1978041285744238975 · Twitter Post
• https://twitter.com/cracbot/status/1979865153651786105 · Twitter Post
• https://t.me/cveNotify/138499 · Telegram Post
• https://twitter.com/SecAideInfo/status/1978766978656453060 · Twitter Post
• https://twitter.com/CveFindCom/status/1978017856496296241 · Twitter Post
• https://phoenixcontact.csaf-tp.certvde.com/.well-known/csaf/white/2025/vde-2025-074.json · Note
• https://twitter.com/CveTodo/status/1978030076877840654 · Twitter Post
• https://twitter.com/CVEnew/status/1978022087966208152 · Twitter Post