CVE-2025-41668

highPriorität · verfolgen · 0EPSS 0.006 · 49. PerzentilDEEURU
grimoire priorityP2 · Scheduled
Exploitable?
—
no known exploitation
Likely / severe?
0.60% (49th) EPSS
CVSS 8.8 · high
Is it mine?
20 products
Prüfe deine Angriffsfläche
Who says so?
4 sources
cnnvd · enisa_euvd · fstec_bdu · phoenix_contact_psirt

EPSS · bewertet 2026-10-27

A low privileged remote attacker with file access can replace a critical file or folder used by the service security-profile to get read, write and execute access to any file on the device.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

  • BehobenAXC F 1152phoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 2025.02 which addresses this vulnerability and will be available for download for all affected devices within the next weeks.

  • BehobenAXC F 2152phoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 2025.02 which addresses this vulnerability and will be available for download for all affected devices within the next weeks.

  • BehobenAXC F 3152phoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 2025.02 which addresses this vulnerability and will be available for download for all affected devices within the next weeks.

  • BehobenBPC 9102Sphoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 2025.02 which addresses this vulnerability and will be available for download for all affected devices within the next weeks.

  • BehobenRFC 4072Sphoenix_contact_psirt

    Phoenix Contact strongly recommends to upgrade to firmware 2025.02 which addresses this vulnerability and will be available for download for all affected devices within the next weeks.

02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

8.8
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v3.18.8highAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU
v3.18.8highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · ENISA EU
v3.18.8highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · info@cert.vde.comAusnutzbarkeit 2.8 · Auswirkung 5.9
v3.18.8highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · Phoenix Contact PSIRT DE
v3.18.1highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)
03

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Exploitation: none · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS
04

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-59USCWE-59USCWE-59US
05

betroffene Produkte (20)

Betroffene Produkte und Versionsbereiche.

06

Advisories (1)

Hersteller- und Ökosystem-Meldungen dazu.

  • VDE-2025-054Phoenix Contact: Multiple Vulnerabilities in PLCnext Firmware2025-07-08csaf · phoenix_contact_psirtDE

    Multiple vulnerabilities in the PLCnext system allowed low-privileged remote attackers to gain unauthorized access or trigger system reboots by manipulating configuration files and symbolic links. Affected services include watchdog, arp-preinit, and security-profile, potentially exposing critical system files. These issues have been resolved in firmware version 2025.0.2.

07

auch bekannt als (5)

Weitere Namen und Kennungen dieser Entität.

08

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvdenisa_euvdfstec_bduphoenix_contact_psirtNVDCVE.orgMITRE
veröffentlicht 2025-07-08geändert 2026-06-17
09

Referenzen (4)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan