Phoenix Contact: Security Advisory for CHARX SEC-3xxx charging controllers
Vulnerability Description
An low privileged remote attacker with an account for the Web-based management can change the system configuration to perform a command injection as root, resulting in a total loss of confidentiality, availability and integrity due to improper control of generation of code ('Code Injection').
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-41699
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Ryo Kato of Panasonic Holdings Corporation
More from Phoenix Contact
View All →Affected Vendor
Phoenix Contact
View all reports →