Phoenix Contact: Several products are affected by vulnerabilities found in OpenSSL
Attacks are possible when installing key files and digitally signed objects. These attacks can only be carried out if these files are uploaded and installed by a logged-in user with high privileges.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-69419US | — | Exploit | ||
Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously
crafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing
non-ASCII BMP code point can tr… | ||||
| CVE-2025-15467US | — | Exploit | ||
Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with
maliciously crafted AEAD parameters can trigger a stack buffer overflow.
Impact summary: A stack buffer… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (6)
- Mitigation
Phoenix Contact strongly recommends to upload firmware only from trusted source and to thorougly check the SHA256 checksum of the firmware image to be uploaded.
- Mitigation
Phoenix Contact strongly recommends to upload firmware only from trusted source and to thorougly check the SHA256 checksum of the firmware image to be uploaded.
- Kein Fix verfügbar
Phoenix Contact strongly recommends to upgrade the fixed firmware as soon as it gets avaliable.
- Kein Fix verfügbar
Phoenix Contact strongly recommends to upgrade the fixed firmware as soon as it gets avaliable.
- Behoben
Phoenix Contact strongly recommends to upgrade the fixed firmware.
- Behoben
Phoenix Contact strongly recommends to upgrade the fixed firmware.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan