Phoenix Contact CHARX SEC-3xxx Charging Controllers Privilege Escalation Vulnerability

A vulnerability exists in Phoenix Contact CHARX SEC-3xxx charging controllers, specifically in versions through 1.6.5 and prior to 1.7.3. This vulnerability allows low-privileged local attackers to exploit insecure SSH permissions on the affected devices, leading to unauthorized privilege escalation to root.

Impact

Exploitation of this vulnerability results in unauthorized root access on the affected device.

Remediation

Users are advised to upgrade to firmware version 1.7.3, which addresses vulnerabilities CVE-2025-24005 and CVE-2025-24006. For general security recommendations, refer to the Phoenix Contact Application Note Security.