Description
The device's PROFINET service is affected by a buffer overflow vulnerability that exists in the default configuration. An unauthenticated remote attacker could exploit this vulnerability to reboot the device or execute arbitrary code.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Phoenix Contact AXC F 1152
Default version status: unaffected
2019.0.4 to < 2026.0.3affected
Phoenix Contact AXC F 1252
Default version status: unaffected
2019.0.4 to < 2026.0.3affected
Phoenix Contact AXC F 2152
Default version status: unaffected
2019.0.4 to < 2026.0.3affected
Phoenix Contact AXC F 3152
Default version status: unaffected
2019.0.4 to < 2026.0.3affected
Phoenix Contact BPC 9102S
Default version status: unaffected
2019.0.4 to < 2026.0.3affected
Phoenix Contact BPC 9202S
Default version status: unaffected
2019.0.4 to < 2026.0.3affected
Phoenix Contact RFC 4072R
Default version status: unaffected
2019.0.4 to < 2026.0.3affected
Phoenix Contact RFC 4072S
Default version status: unaffected
2019.0.4 to < 2026.0.3affected
Phoenix Contact VL3 UPC 2440 EDGE
Default version status: unaffected
2019.0.4 to < 2026.0.3affected
Phoenix Contact VPLCNEXT CONTROL 1000
Default version status: unaffected
2019.0.4 to < 2026.0.3affected
Phoenix Contact VPLCNEXT CONTROL 2000
Default version status: unaffected
2019.0.4 to < 2026.0.3affected
Phoenix Contact VPLCNEXT CONTROL 3000
Default version status: unaffected
2019.0.4 to < 2026.0.3affected
Phoenix Contact VPLCNEXT CONTROL 500
Default version status: unaffected
2019.0.4 to < 2026.0.3affected
Phoenix Contact EPC 1502
Default version status: unaffected
2019.0.4 to < 2026.0.3affected
Phoenix Contact EPC 1522
Default version status: unaffected
2019.0.4 to < 2026.0.3affected