Phoenix Contact: Device and Update Management Windows Installer Privilege Escalation
view advisory published 2025-08-12
A privilege escalation vulnerability exists in Phoenix Contact Device and Update Management prior to version 2025.3.1 due to misconfigured permissions on nssm.exe in the DAUM-WINDOWS-SERVICE. This misconfiguration allows a low-privileged local user to execute arbitrary code with administrative privileges.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-41686US | —OT elevated | — | ||
A low-privileged local attacker can exploit improper permissions on nssm.exe to escalate their privileges and gain administrative access. | ||||
02
references
External citations — patches, advisories, analysis.
- Phoenix Contact advisory overview at CERT@VDEexternal
- VDE-2025-063: Phoenix Contact: Device and Update Management Windows Installer Privilege Escalation - HTMLself
- Phoenix Contact application noteexternal
- PCSA-2025/00010external
- VDE-2025-063: Phoenix Contact: Device and Update Management Windows Installer Privilege Escalation - CSAFself
03
remediations (1)
- FixedDaUM 2025.3.1
Phoenix Contact strongly recommends to upgrade to Update to the latest Version of the DaUM software which fixes this vulnerability.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan