Phoenix Contact: Several products are affected by vulnerabilities found in OpenSSL
Attacks are possible when installing key files and digitally signed objects. These attacks can only be carried out if these files are uploaded and installed by a logged-in user with high privileges.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-69419US | — | Exploit | ||
Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously
crafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing
non-ASCII BMP code point can tr… | ||||
| CVE-2025-15467US | — | Exploit | ||
Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with
maliciously crafted AEAD parameters can trigger a stack buffer overflow.
Impact summary: A stack buffer… | ||||
references
External citations — patches, advisories, analysis.
remediations (6)
- Mitigation
Phoenix Contact strongly recommends to upload firmware only from trusted source and to thorougly check the SHA256 checksum of the firmware image to be uploaded.
- Mitigation
Phoenix Contact strongly recommends to upload firmware only from trusted source and to thorougly check the SHA256 checksum of the firmware image to be uploaded.
- No fix available
Phoenix Contact strongly recommends to upgrade the fixed firmware as soon as it gets avaliable.
- No fix available
Phoenix Contact strongly recommends to upgrade the fixed firmware as soon as it gets avaliable.
- Fixed
Phoenix Contact strongly recommends to upgrade the fixed firmware.
- Fixed
Phoenix Contact strongly recommends to upgrade the fixed firmware.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan