CVE-2025-25269
Published: 08 July 2025
Summary
CVE-2025-25269 is a high-severity OS Command Injection (CWE-78) vulnerability in Phoenixcontact Charx Sec-3000 Firmware. Its CVSS base score is 8.4 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Privilege Escalation (T1068); ranked at the 36.0th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 AC-6 (Least Privilege) and SI-10 (Information Input Validation).
Deeper analysis
CVE-2025-25269 is an OS command injection vulnerability (CWE-78) published on 2025-07-08T07:15:24.890, carrying a CVSS v3.1 base score of 8.4 (AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The flaw enables an unauthenticated local attacker to inject a command that is subsequently executed as root, resulting in privilege escalation. The specific software or component affected is detailed in the referenced advisory.
An unauthenticated local attacker with access to the system can exploit this vulnerability with low attack complexity and no user interaction required. Successful exploitation grants root-level execution of arbitrary commands, providing high-impact access to confidentiality, integrity, and availability, effectively allowing full system compromise from a local unprivileged position.
The primary advisory from CERT VDE (VDE-2025-019) at https://certvde.com/de/advisories/VDE-2025-019 provides further details on mitigation and patches. Security practitioners should consult this reference for vendor-specific remediation steps.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-20403
Vulnerability details
An unauthenticated local attacker can inject a command that is subsequently executed as root, leading to a privilege escalation.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
OS command injection (CWE-78) directly enables local unauthenticated attackers to execute arbitrary commands as root, mapping to exploitation for privilege escalation.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly prevents OS command injection by enforcing input validation and error handling at vulnerable interfaces to block malicious command insertion.
Addresses the specific flaw in CVE-2025-25269 through timely identification, reporting, and patching to eliminate the command injection vulnerability.
Mitigates privilege escalation by enforcing least privilege on processes, preventing injected commands from executing with root privileges.