Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2025-41667

Phoenix Contact: File access due to the replacement of a critical file used by the arp-preinit script

Description

A low privileged remote attacker with file access can replace a critical file used by the arp-preinit script to get read, write and execute access to any file on the device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PHOENIX CONTACT AXC F 1152

Default version status: unaffected

  • 0 to < 2025.0.2affected

PHOENIX CONTACT AXC F 2152

Default version status: unaffected

  • 0 to < 2025.0.2affected

PHOENIX CONTACT AXC F 3152

Default version status: unaffected

  • 0 to < 2025.0.2affected

PHOENIX CONTACT BPC 9102S

Default version status: unaffected

  • 0 to < 2025.0.2affected

PHOENIX CONTACT RFC 4072S

Default version status: unaffected

  • 0 to < 2025.0.2affected

References