EUVD-2025-20406Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A05:2025 - Injection
ASVS 5.0
V2 - Validation and Business Logic Input validation, allowlisting
|
| Impact | An attacker with limited access can gain administrative or root privileges, enabling full control over the affected system. With a CVSS score of 7.8 (HIGH), this represents a significant risk. |
| Exploit ScenarioDerived | A local attacker exploits a vulnerability in a privileged service or misconfigured permissions to escalate from a standard user to root/administrator. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Mar 16, 2026
A local attacker with a local user account can leverage a vulnerable script via SSH to escalate privileges to root due to improper input validation.
Earlier versions of this analysis (1)
RemediationAI
Apply the principle of least privilege. Keep systems patched. Monitor for suspicious privilege changes. Use mandatory access controls (SELinux, AppArmor).
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 4 packages in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
Privilege escalation allows a low-privileged user or process to gain elevated permissions beyond what was originally authorized. This vulnerability is classified as Improper Input Validation (CWE-20).
Know when Charx Sec 3000 Firmware gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
3Executive ViewAI
CVE-2025-24005 affects systems with vulnerable scripts accessible via SSH, allowing any local user account holder to escalate privileges to root through improper input validation. This creates a critical insider threat vector, as any employee or contractor with system access can gain administrative control without authorization, potentially enabling data theft, system compromise, or destructive actions.
Apply vendor patch. If immediate patching is not feasible: (1) restrict SSH access via firewall/network segmentation to authorized IPs only; (2) disable or remove the vulnerable script if operationally feasible; (3) implement sudo restrictions to prevent local users from executing the vulnerable script; (4) enforce multi-factor authentication for all SSH connections; (5) enable detailed logging and alerting on SSH authentication and privilege escalation attempts.
Threat Intelligence Overview
NVD
CVE.org
EPSS
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Privilege escalation occurs when an attacker leverages flaws in access control mechanisms to gain permissions beyond what they were originally granted.
More in Charx Sec 3000 Firmware
View allAn unauthenticated remote attacker can alter the device configuration in a way to get remote code execution as root with
A remote unauthenticated attacker can use the firmware update feature on the LAN interface of the device to reset the pa
An unauthenticated remote attacker can write memory out of bounds due to improper input validation in the MQTT stack. Ra
An unauthenticated remote attacker can perform a remote code execution due to an origin validation error. Rated critical
An unauthenticated remote attacker can modify configurations to perform a remote code execution, gain root rights or per
A security vulnerability in An unauthenticated adjacent attacker (CVSS 8.8). High severity vulnerability requiring promp
An unauthenticated adjacent attacker can modify configuration by sending specific requests to an API-endpoint resulting
An unauthenticated remote attacker can influence the communication due to the lack of encryption of sensitive data via a
An unauthenticated local attacker can inject a command that is subsequently executed as root, leading to a privilege esc
An unauthenticated remote attacker can use MQTT messages to trigger out-of-bounds writes in charging stations complying
A low privileged local attacker can leverage insecure permissions via SSH on the affected devices to escalate privileges
A local attacker with low privileges can perform a privilege escalation with an init script due to a TOCTOU vulnerabilit
GitHub PoC
Exploit-DB