Phoenix Contact: Device and Update Management Windows Installer Privilege Escalation
A privilege escalation vulnerability exists in Phoenix Contact Device and Update Management prior to version 2025.3.1 due to misconfigured permissions on nssm.exe in the DAUM-WINDOWS-SERVICE. This misconfiguration allows a low-privileged local user to execute arbitrary code with administrative privileges.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-41686US | —OT erhöht | — | ||
A low-privileged local attacker can exploit improper permissions on nssm.exe to escalate their privileges and gain administrative access. | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Phoenix Contact advisory overview at CERT@VDEexternal
- VDE-2025-063: Phoenix Contact: Device and Update Management Windows Installer Privilege Escalation - HTMLself
- Phoenix Contact application noteexternal
- PCSA-2025/00010external
- VDE-2025-063: Phoenix Contact: Device and Update Management Windows Installer Privilege Escalation - CSAFself
Behebungen (1)
- BehobenDaUM 2025.3.1
Phoenix Contact strongly recommends to upgrade to Update to the latest Version of the DaUM software which fixes this vulnerability.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan