CVE-2025-41670: falha de alta gravidade em Phoenix Contact AXC F 1152
Untrusted Search Path
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.7epss 0.2%
A local user with low privileges may be able to influence the behavior of a privileged system service by manipulating configuration or application-related files located in user-writable areas of the filesystem. The affected service processes data from locations that are not sufficiently protected against modification by low-privileged users. As the service runs with elevated privileges, successful exploitation may result in a local privilege escalation.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
Phoenix Contact · AXC F 1152Phoenix Contact · AXC F 1252Phoenix Contact · AXC F 2000 EAPhoenix Contact · AXC F 2152Phoenix Contact · AXC F 3152Phoenix Contact · BPC 9102SPhoenix Contact · EPC 1522Phoenix Contact · RFC 4072RPhoenix Contact · RFC 4072SPhoenix Contact · VL3 UPC 2440 EDGEPhoenix Contact · VPLCNEXT CONTROL 1000Phoenix Contact · VPLCNEXT CONTROL 2000Phoenix Contact · VPLCNEXT CONTROL 3000Phoenix Contact · VPLCNEXT CONTROL 500CVEs relacionadas — Phoenix Contact AXC F 1152
No mesmo produto, das mais perigosas para as menos.