Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2025-41665

Phoenix Contact: DoS of the PLC due to incorrect default permissions possible

Description

An low privileged remote attacker can enforce the watchdog of the affected devices to reboot the PLC due to incorrect default permissions of a config file.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PHOENIX CONTACT AXC F 1152

Default version status: unaffected

  • 0 to < 2025.0.2affected

PHOENIX CONTACT AXC F 2152

Default version status: unaffected

  • 0 to < 2025.0.2affected

PHOENIX CONTACT AXC F 3152

Default version status: unaffected

  • 0 to < 2025.0.2affected

PHOENIX CONTACT BPC 9102S

Default version status: unaffected

  • 0 to < 2025.0.2affected

PHOENIX CONTACT RFC 4072S

Default version status: unaffected

  • 0 to < 2025.0.2affected

References