Charx Sec 3000 Firmware CVE-2025-25271

An unauthenticated remote attacker can alter the device configuration in a way to get remote code execution as root with

A remote unauthenticated attacker can use the firmware update feature on the LAN interface of the device to reset the pa

An unauthenticated remote attacker can write memory out of bounds due to improper input validation in the MQTT stack. Ra

An unauthenticated remote attacker can perform a remote code execution due to an origin validation error. Rated critical

An unauthenticated remote attacker can modify configurations to perform a remote code execution, gain root rights or per

An unauthenticated adjacent attacker can modify configuration by sending specific requests to an API-endpoint resulting

An unauthenticated remote attacker can influence the communication due to the lack of encryption of sensitive data via a

An unauthenticated local attacker can inject a command that is subsequently executed as root, leading to a privilege esc

An unauthenticated remote attacker can use MQTT messages to trigger out-of-bounds writes in charging stations complying

A local attacker with a local user account can leverage a vulnerable script via SSH to escalate privileges to root due t

A low privileged local attacker can leverage insecure permissions via SSH on the affected devices to escalate privileges

A local attacker with low privileges can perform a privilege escalation with an init script due to a TOCTOU vulnerabilit