Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2025-41670

Untrusted Search Path

Description

A local user with low privileges may be able to influence the behavior of a privileged system service by manipulating configuration or application-related files located in user-writable areas of the filesystem. The affected service processes data from locations that are not sufficiently protected against modification by low-privileged users. As the service runs with elevated privileges, successful exploitation may result in a local privilege escalation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Phoenix Contact AXC F 1152

Default version status: unaffected

  • 0.0.0 to < 2026.0.3affected

Phoenix Contact AXC F 1252

Default version status: unaffected

  • 0.0.0 to < 2026.0.3affected

Phoenix Contact AXC F 2000 EA

Default version status: unaffected

  • 0.0.0 to < 2026.0.3affected

Phoenix Contact AXC F 2152

Default version status: unaffected

  • 0.0.0 to < 2026.0.3affected

Phoenix Contact AXC F 3152

Default version status: unaffected

  • 0.0.0 to < 2026.0.3affected

Phoenix Contact BPC 9102S

Default version status: unaffected

  • 0.0.0 to < 2026.0.3affected

Phoenix Contact EPC 1522

Default version status: unaffected

  • 0.0.0 to < 2026.0.3affected

Phoenix Contact RFC 4072R

Default version status: unaffected

  • 0.0.0 to < 2026.0.3affected

Phoenix Contact RFC 4072S

Default version status: unaffected

  • 0.0.0 to < 2026.0.3affected

Phoenix Contact VL3 UPC 2440 EDGE

Default version status: unaffected

  • 0.0.0 to < 2026.0.3affected

Phoenix Contact VPLCNEXT CONTROL 1000

Default version status: unaffected

  • 0.0.0 to < 2026.0.3affected

Phoenix Contact VPLCNEXT CONTROL 2000

Default version status: unaffected

  • 0.0.0 to < 2026.0.3affected

Phoenix Contact VPLCNEXT CONTROL 3000

Default version status: unaffected

  • 0.0.0 to < 2026.0.3affected

Phoenix Contact VPLCNEXT CONTROL 500

Default version status: unaffected

  • 0.0.0 to < 2026.0.3affected

References