CVE-2025-41666highCWE-59

CVE-2025-41666: falha de alta gravidade em PHOENIX CONTACT AXC F 1152

Phoenix Contact: File access due to the replacement of a critical file used by the watchdog

Publicada em

Seguir esta CVE+ Monitorar AXC F+ Monitorar RFC

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.8epss 0.6%
A low privileged remote attacker with file access can replace a critical file used by the watchdog to get read, write and execute access to any file on the device after the watchdog has been initialized.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
PHOENIX CONTACT · AXC F 1152PHOENIX CONTACT · AXC F 2152PHOENIX CONTACT · AXC F 3152PHOENIX CONTACT · BPC 9102SPHOENIX CONTACT · RFC 4072S
CVEs relacionadas — PHOENIX CONTACT AXC F 1152

No mesmo produto, das mais perigosas para as menos.

CVE-2023-46142HIGHPHOENIX CONTACT: Insufficient Read and Write Protection to Logic and Runtime Data in PLCnext ControlEPSS 0.7%CVE-2025-41668HIGHPhoenix Contact: File access due to the replacement of a critical file used by the service security-profileEPSS 0.6%CVE-2025-41667HIGHPhoenix Contact: File access due to the replacement of a critical file used by the arp-preinit scriptEPSS 0.6%CVE-2025-41665MEDIUMPhoenix Contact: DoS of the PLC due to incorrect default permissions possibleEPSS 0.4%CVE-2023-46144MEDIUMPHOENIX CONTACT: PLCnext Control prone to download of code without integrity checkEPSS 0.3%