Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2025-41666

Phoenix Contact: File access due to the replacement of a critical file used by the watchdog

Description

A low privileged remote attacker with file access can replace a critical file used by the watchdog to get read, write and execute access to any file on the device after the watchdog has been initialized.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PHOENIX CONTACT AXC F 1152

Default version status: unaffected

  • 0 to < 2025.0.2affected

PHOENIX CONTACT AXC F 2152

Default version status: unaffected

  • 0 to < 2025.0.2affected

PHOENIX CONTACT AXC F 3152

Default version status: unaffected

  • 0 to < 2025.0.2affected

PHOENIX CONTACT BPC 9102S

Default version status: unaffected

  • 0 to < 2025.0.2affected

PHOENIX CONTACT RFC 4072S

Default version status: unaffected

  • 0 to < 2025.0.2affected

References