Phoenix Contact: Multiple Vulnerabilities in PLCnext Firmware
Multiple vulnerabilities in the PLCnext system allowed low-privileged remote attackers to gain unauthorized access or trigger system reboots by manipulating configuration files and symbolic links. Affected services include watchdog, arp-preinit, and security-profile, potentially exposing critical system files. These issues have been resolved in firmware version 2025.0.2.
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-41668US | — | — | ||
A low privileged remote attacker with file access can replace a critical file or folder used by the service security-profile to get read, write and execute access to any file on th… | ||||
| CVE-2025-41667US | — | — | ||
A low privileged remote attacker with file access can replace a critical file used by the arp-preinit script to get read, write and execute access to any file on the device. | ||||
| CVE-2025-41666US | — | — | ||
A low privileged remote attacker with file access can replace a critical file used by the watchdog to get read, write and execute access to any file on the device after the watchdo… | ||||
| CVE-2025-41665US | —OT elevated | — | ||
An low privileged remote attacker can enforce the watchdog of the affected devices to reboot the PLC due to incorrect default permissions of a config file. | ||||
references
External citations — patches, advisories, analysis.
remediations (20)
- FixedAXC F 1152
Phoenix Contact strongly recommends to upgrade to firmware 2025.02 which addresses this vulnerability and will be available for download for all affected devices within the next weeks.
- FixedAXC F 1152
Phoenix Contact strongly recommends to upgrade to firmware 2025.02 which addresses this vulnerability and will be available for download for all affected devices within the next weeks.
- FixedAXC F 1152
Phoenix Contact strongly recommends to upgrade to firmware 2025.02 which addresses this vulnerability and will be available for download for all affected devices within the next weeks.
- FixedAXC F 1152
Phoenix Contact strongly recommends to upgrade to firmware 2025.02 which addresses this vulnerability and will be available for download for all affected devices within the next weeks.
- FixedAXC F 2152
Phoenix Contact strongly recommends to upgrade to firmware 2025.02 which addresses this vulnerability and will be available for download for all affected devices within the next weeks.
- FixedAXC F 2152
Phoenix Contact strongly recommends to upgrade to firmware 2025.02 which addresses this vulnerability and will be available for download for all affected devices within the next weeks.
- FixedAXC F 2152
Phoenix Contact strongly recommends to upgrade to firmware 2025.02 which addresses this vulnerability and will be available for download for all affected devices within the next weeks.
- FixedAXC F 2152
Phoenix Contact strongly recommends to upgrade to firmware 2025.02 which addresses this vulnerability and will be available for download for all affected devices within the next weeks.
- FixedAXC F 3152
Phoenix Contact strongly recommends to upgrade to firmware 2025.02 which addresses this vulnerability and will be available for download for all affected devices within the next weeks.
- FixedAXC F 3152
Phoenix Contact strongly recommends to upgrade to firmware 2025.02 which addresses this vulnerability and will be available for download for all affected devices within the next weeks.
- FixedAXC F 3152
Phoenix Contact strongly recommends to upgrade to firmware 2025.02 which addresses this vulnerability and will be available for download for all affected devices within the next weeks.
- FixedAXC F 3152
Phoenix Contact strongly recommends to upgrade to firmware 2025.02 which addresses this vulnerability and will be available for download for all affected devices within the next weeks.
- FixedBPC 9102S
Phoenix Contact strongly recommends to upgrade to firmware 2025.02 which addresses this vulnerability and will be available for download for all affected devices within the next weeks.
- FixedBPC 9102S
Phoenix Contact strongly recommends to upgrade to firmware 2025.02 which addresses this vulnerability and will be available for download for all affected devices within the next weeks.
- FixedBPC 9102S
Phoenix Contact strongly recommends to upgrade to firmware 2025.02 which addresses this vulnerability and will be available for download for all affected devices within the next weeks.
- FixedBPC 9102S
Phoenix Contact strongly recommends to upgrade to firmware 2025.02 which addresses this vulnerability and will be available for download for all affected devices within the next weeks.
- FixedRFC 4072S
Phoenix Contact strongly recommends to upgrade to firmware 2025.02 which addresses this vulnerability and will be available for download for all affected devices within the next weeks.
- FixedRFC 4072S
Phoenix Contact strongly recommends to upgrade to firmware 2025.02 which addresses this vulnerability and will be available for download for all affected devices within the next weeks.
- FixedRFC 4072S
Phoenix Contact strongly recommends to upgrade to firmware 2025.02 which addresses this vulnerability and will be available for download for all affected devices within the next weeks.
- FixedRFC 4072S
Phoenix Contact strongly recommends to upgrade to firmware 2025.02 which addresses this vulnerability and will be available for download for all affected devices within the next weeks.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan