CVE-2025-41667highCWE-59

CVE-2025-41667: falha de alta gravidade em PHOENIX CONTACT AXC F 1152

Phoenix Contact: File access due to the replacement of a critical file used by the arp-preinit script

Publicada em

Seguir esta CVE+ Monitorar AXC F+ Monitorar RFC

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.8epss 0.6%
A low privileged remote attacker with file access can replace a critical file used by the arp-preinit script to get read, write and execute access to any file on the device.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
PHOENIX CONTACT · AXC F 1152PHOENIX CONTACT · AXC F 2152PHOENIX CONTACT · AXC F 3152PHOENIX CONTACT · BPC 9102SPHOENIX CONTACT · RFC 4072S
CVEs relacionadas — PHOENIX CONTACT AXC F 1152

No mesmo produto, das mais perigosas para as menos.

CVE-2023-46142HIGHPHOENIX CONTACT: Insufficient Read and Write Protection to Logic and Runtime Data in PLCnext ControlEPSS 0.7%CVE-2025-41668HIGHPhoenix Contact: File access due to the replacement of a critical file used by the service security-profileEPSS 0.6%CVE-2025-41666HIGHPhoenix Contact: File access due to the replacement of a critical file used by the watchdogEPSS 0.6%CVE-2025-41665MEDIUMPhoenix Contact: DoS of the PLC due to incorrect default permissions possibleEPSS 0.4%CVE-2023-46144MEDIUMPHOENIX CONTACT: PLCnext Control prone to download of code without integrity checkEPSS 0.3%