CVE-2025-41699 — Phoenix Contact: Security Advisory for CHARX SEC-3xxx charging controllers
An low privileged remote attacker with an account for the Web-based management can change the system configuration to perform a command injection as root, resulting in a total l…
Published: 2025-10-14 · CVSS: 8.8 · CVSS 3.1
An low privileged remote attacker with an account for the Web-based management can change the system configuration to perform a command injection as root, resulting in a total loss of confidentiality, availability and integrity due to improper control of generation of code ('Code Injection').
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7