CVE-2025-41771mediumCWE-89

CVE-2025-41771: falha de média gravidade em Phoenix Contact AXC F 1152

SQL injection

Publicada em

Seguir esta CVE+ Monitorar AXC F+ Monitorar RFC

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.3epss 0.3%
An authenticated attacker with low privileges can access an endpoint in the controller’s web interface that is vulnerable to SQL injection. The vulnerability affects a SQLite database used only for storing notification messages. Therefore, the impact is limited to the system’s notification functionality.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Produtos afetados
Phoenix Contact · AXC F 1152Phoenix Contact · AXC F 1252Phoenix Contact · AXC F 2000 EAPhoenix Contact · AXC F 2152Phoenix Contact · AXC F 3152Phoenix Contact · BPC 9102SPhoenix Contact · BPC 9202SPhoenix Contact · Catan C1Phoenix Contact · EPC 1502Phoenix Contact · EPC 1522Phoenix Contact · RFC 4072RPhoenix Contact · RFC 4072SPhoenix Contact · VL3 UPC 2440 EDGEPhoenix Contact · VPLCNEXT CONTROL 1000Phoenix Contact · VPLCNEXT CONTROL 2000Phoenix Contact · VPLCNEXT CONTROL 3000Phoenix Contact · VPLCNEXT CONTROL 500
CVEs relacionadas — Phoenix Contact AXC F 1152

No mesmo produto, das mais perigosas para as menos.

CVE-2025-41769CRITICALUnauthenticated Buffer Overflow in PROFINET ServiceEPSS 0.8%CVE-2025-41770HIGHUnauthenticated Denial of ServiceEPSS 0.5%CVE-2025-41669HIGHInsufficient Verification of Data AuthenticityEPSS 0.2%CVE-2025-41670HIGHUntrusted Search PathEPSS 0.2%