VDE-2025-019

csafDEphoenix_contact_psirt

Phoenix Contact: Security Advisory for CHARX SEC-3xxx charging controllers

view advisory published 2025-07-08

Multiple vulnerabilities in the firmware of CHARX SEC-3xxx charging controllers have been discovered. **Update Version 1.1.0:** Updated the reporting credits for CVE-2025-25271.

01

describes (4)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2025-25271US	—OT elevated	0.35% (28th)	—	2025-07-08
An unauthenticated adjacent attacker is able to configure a new OCPP backend, due to insecure defaults for the configuration interface.
CVE-2025-25270US	—	0.75% (55th)	—	2025-07-08
An unauthenticated remote attacker can alter the device configuration in a way to get remote code execution as root with specific configurations.
CVE-2025-25269US	—	0.30% (22nd)	—	2025-07-08
An unauthenticated local attacker can inject a command that is subsequently executed as root, leading to a privilege escalation.
CVE-2025-25268US	—OT elevated	0.36% (30th)	—	2025-07-08
An unauthenticated adjacent attacker can modify configuration by sending specific requests to an API-endpoint resulting in read and write access due to missing authentication.

02

references

External citations — patches, advisories, analysis.

03

remediations (4)

Fixed
Phoenix Contact strongly recommends to upgrade to firmware version 1.7.3 which fixes these vulnerabilities.
Fixed
Phoenix Contact strongly recommends to upgrade to firmware version 1.7.3 which fixes these vulnerabilities.
Fixed
Phoenix Contact strongly recommends to upgrade to firmware version 1.7.3 which fixes these vulnerabilities.
Fixed
Phoenix Contact strongly recommends to upgrade to firmware version 1.7.3 which fixes these vulnerabilities.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.