CVE-2025-41699

{
  "id": "CVE-2025-41699",
  "sourceIdentifier": "[email protected]",
  "published": "2025-10-14T09:15:32.830",
  "lastModified": "2026-10-18T21:10:00.120",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "An low privileged remote attacker with an account for the Web-based management can change the system configuration to perform a command injection as root, resulting in a total loss of confidentiality, availability and integrity due to improper control of generation of code ('Code Injection')."
    },
    {
      "lang": "es",
      "value": "Un atacante remoto con privilegios bajos con una cuenta para la gestión basada en web puede cambiar la configuración del sistema para realizar una inyección de comandos como root, lo que resulta en una pérdida total de confidencialidad, disponibilidad e integridad debido a un control inadecuado de la generación de código ('Inyección de Código')."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Phoenix Contact",
          "product": "CHARX SEC-3150",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "0.0.0",
              "lessThan": "1.7.4",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Phoenix Contact",
          "product": "CHARX SEC-3100",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "0.0.0",
              "lessThan": "1.7.4",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Phoenix Contact",
          "product": "CHARX SEC-3050",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "0.0.0",
              "lessThan": "1.7.4",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Phoenix Contact",
          "product": "CHARX SEC-3000",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "0.0.0",
              "lessThan": "1.7.4",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "baseScore": 8.8,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 5.9
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2025-10-14T18:43:34.170197Z",
          "id": "CVE-2025-41699",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-94"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://phoenixcontact.csaf-tp.certvde.com/.well-known/csaf/white/2025/vde-2025-074.json",
      "source": "[email protected]"
    }
  ]
}