CVE-2025-41770highCWE-770

CVE-2025-41770: falha de alta gravidade em Phoenix Contact AXC F 1152

Unauthenticated Denial of Service

Publicada em

Seguir esta CVE+ Monitorar AXC F+ Monitorar RFC

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.7epss 0.5%
An unauthenticated denial-of-service vulnerability in the device's PLCnext Engineer communication interface allow an remote attacker to interrupt access via the client application. Successful exploitation prevents communication until the PLCnext service is manually restarted.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Produtos afetados
Phoenix Contact · AXC F 1152Phoenix Contact · AXC F 1252Phoenix Contact · AXC F 2000 EAPhoenix Contact · AXC F 2152Phoenix Contact · AXC F 3152Phoenix Contact · BPC 9102SPhoenix Contact · BPC 9202SPhoenix Contact · Catan C1Phoenix Contact · EPC 1502Phoenix Contact · EPC 1522Phoenix Contact · RFC 4072RPhoenix Contact · RFC 4072SPhoenix Contact · VL3 UPC 2440 EDGEPhoenix Contact · VPLCNEXT CONTROL 1000Phoenix Contact · VPLCNEXT CONTROL 2000Phoenix Contact · VPLCNEXT CONTROL 3000Phoenix Contact · VPLCNEXT CONTROL 500
CVEs relacionadas — Phoenix Contact AXC F 1152

No mesmo produto, das mais perigosas para as menos.

CVE-2025-41769CRITICALUnauthenticated Buffer Overflow in PROFINET ServiceEPSS 0.8%CVE-2025-41771MEDIUMSQL injectionEPSS 0.3%CVE-2025-41669HIGHInsufficient Verification of Data AuthenticityEPSS 0.2%CVE-2025-41670HIGHUntrusted Search PathEPSS 0.2%