Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2025-41668

Phoenix Contact: File access due to the replacement of a critical file used by the service security-profile

Description

A low privileged remote attacker with file access can replace a critical file or folder used by the service security-profile to get read, write and execute access to any file on the device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PHOENIX CONTACT AXC F 1152

Default version status: unaffected

  • 0 to < 2025.0.2affected

PHOENIX CONTACT AXC F 2152

Default version status: unaffected

  • 0 to < 2025.0.2affected

PHOENIX CONTACT AXC F 3152

Default version status: unaffected

  • 0 to < 2025.0.2affected

PHOENIX CONTACT BPC 9102S

Default version status: unaffected

  • 0 to < 2025.0.2affected

PHOENIX CONTACT RFC 4072S

Default version status: unaffected

  • 0 to < 2025.0.2affected

References