CVE-2025-41769

CriticalCVSS 9.8/10Last modified Sep 29, 2026

Description

The device's PROFINET service is affected by a buffer overflow vulnerability that exists in the default configuration. An unauthenticated remote attacker could exploit this vulnerability to reboot the device or execute arbitrary code.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-120

Affected software

VendorProductVersions
Phoenix ContactAXC F 1152>= 2019.0.4, < 2026.0.3
Phoenix ContactAXC F 1252>= 2019.0.4, < 2026.0.3
Phoenix ContactAXC F 2152>= 2019.0.4, < 2026.0.3
Phoenix ContactAXC F 3152>= 2019.0.4, < 2026.0.3
Phoenix ContactBPC 9102S>= 2019.0.4, < 2026.0.3
Phoenix ContactBPC 9202S>= 2019.0.4, < 2026.0.3
Phoenix ContactRFC 4072R>= 2019.0.4, < 2026.0.3
Phoenix ContactRFC 4072S>= 2019.0.4, < 2026.0.3
Phoenix ContactVL3 UPC 2440 EDGE>= 2019.0.4, < 2026.0.3
Phoenix ContactVPLCNEXT CONTROL 1000>= 2019.0.4, < 2026.0.3
Phoenix ContactVPLCNEXT CONTROL 2000>= 2019.0.4, < 2026.0.3
Phoenix ContactVPLCNEXT CONTROL 3000>= 2019.0.4, < 2026.0.3
Phoenix ContactVPLCNEXT CONTROL 500>= 2019.0.4, < 2026.0.3
Phoenix ContactEPC 1502>= 2019.0.4, < 2026.0.3
Phoenix ContactEPC 1522>= 2019.0.4, < 2026.0.3

References

Timeline

Published
Aug 12, 2026
Last modified
Sep 29, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-41775.3The Flynax Bridge plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the deleteUser() funcCVE-2025-417707.5An unauthenticated denial-of-service vulnerability in the device's PLCnext Engineer communication interface allow an remote attacker to inteCVE-2025-417714.3An authenticated attacker with low privileges can access an endpoint in the controller’s web interface that is vulnerable to SQL injection. CVE-2025-417727.5An unauthenticated remote attacker can obtain valid session tokens because they are exposed in plaintext within the URL parameters of the wwCVE-2025-41785.4A vulnerability was found in xiaowei1118 java_server up to 11a5bac8f4ba1c17e4bc1b27cad6d24868500e3a on Windows and classified as critical. TCVE-2025-41797.3The Flynax Bridge plugin for WordPress is vulnerable to limited Privilege Escalation due to a missing capability check on the registerUser()CVE-2025-41809.8A vulnerability was found in PCMan FTP Server 2.0.7. It has been classified as critical. Affected is an unknown function of the component TRCVE-2025-41819.8A vulnerability was found in PCMan FTP Server 2.0.7. It has been declared as critical. Affected by this vulnerability is an unknown functionCVE-2025-41829.8A vulnerability was found in PCMan FTP Server 2.0.7. It has been rated as critical. Affected by this issue is some unknown functionality of CVE-2025-41839.8A vulnerability classified as critical has been found in PCMan FTP Server 2.0.7. This affects an unknown part of the component RECV Command CVE-2025-41849.8A vulnerability classified as critical was found in PCMan FTP Server 2.0.7. This vulnerability affects unknown code of the component QUOTE CCVE-2025-41856.3A vulnerability, which was classified as critical, has been found in Wangshen SecGate 3600 2024. This issue affects some unknown processing