Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2025-41771

SQL injection

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

An authenticated attacker with low privileges can access an endpoint in the controller’s web interface that is vulnerable to SQL injection. The vulnerability affects a SQLite database used only for storing notification messages. Therefore, the impact is limited to the system’s notification functionality.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Phoenix Contact AXC F 1152

Default version status: unaffected

  • 2019.0.4 to < 2026.0.3affected

Phoenix Contact AXC F 1252

Default version status: unaffected

  • 2019.0.4 to < 2026.0.3affected

Phoenix Contact AXC F 2000 EA

Default version status: unaffected

  • 2019.0.4 to < 2026.0.3affected

Phoenix Contact AXC F 2152

Default version status: unaffected

  • 2019.0.4 to < 2026.0.3affected

Phoenix Contact AXC F 3152

Default version status: unaffected

  • 2019.0.4 to < 2026.0.3affected

Phoenix Contact BPC 9102S

Default version status: unaffected

  • 2019.0.4 to < 2026.0.3affected

Phoenix Contact BPC 9202S

Default version status: unaffected

  • 2019.0.4 to < 2026.0.3affected

Phoenix Contact RFC 4072R

Default version status: unaffected

  • 2019.0.4 to < 2026.0.3affected

Phoenix Contact RFC 4072S

Default version status: unaffected

  • 2019.0.4 to < 2026.0.3affected

Phoenix Contact VL3 UPC 2440 EDGE

Default version status: unaffected

  • 2019.0.4 to < 2026.0.3affected

Phoenix Contact VPLCNEXT CONTROL 1000

Default version status: unaffected

  • 2019.0.4 to < 2026.0.3affected

Phoenix Contact VPLCNEXT CONTROL 2000

Default version status: unaffected

  • 2019.0.4 to < 2026.0.3affected

Phoenix Contact VPLCNEXT CONTROL 3000

Default version status: unaffected

  • 2019.0.4 to < 2026.0.3affected

Phoenix Contact VPLCNEXT CONTROL 500

Default version status: unaffected

  • 2019.0.4 to < 2026.0.3affected

Phoenix Contact Catan C1

Default version status: unaffected

  • 2019.0.4 to < 2026.0.3affected

Phoenix Contact EPC 1502

Default version status: unaffected

  • 2019.0.4 to < 2026.0.3affected

Phoenix Contact EPC 1522

Default version status: unaffected

  • 2019.0.4 to < 2026.0.3affected

References