CVE-2018-20969

highpriority · track · 32EPSS 0.027 · 86 %ileDEEUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

2.68% (86th) EPSS

CVSS 9.3 · high

Is it mine?

59 products

Check your exposure

Who says so?

5 sources

cnnvd · enisa_euvd · nvd · phoenix_contact_psirt

EPSS · scored 2026-10-27

do_ed_script in pch.c in GNU patch through 2.7.6 does not block strings beginning with a ! character. NOTE: this is the same commit as for CVE-2019-13638, but the ! syntax is specific to ed, and is unrelated to a shell metacharacter.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

Fixedpatch-0:2.7.6-9.el8_0.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:2798
Fixedpatch-0:2.7.6-9.el8_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:2798
Fixedpatch-0:2.7.6-9.el8_0.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:2798
Fixedpatch-0:2.7.6-9.el8_0.src as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:2798
Fixedpatch-0:2.7.6-9.el8_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:2798
Fixedpatch-debuginfo-0:2.7.6-9.el8_0.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:2798
Fixedpatch-debuginfo-0:2.7.6-9.el8_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:2798
Fixedpatch-debuginfo-0:2.7.6-9.el8_0.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:2798
Fixedpatch-debuginfo-0:2.7.6-9.el8_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:2798
Fixedpatch-debugsource-0:2.7.6-9.el8_0.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:2798
Fixedpatch-debugsource-0:2.7.6-9.el8_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:2798
Fixedpatch-debugsource-0:2.7.6-9.el8_0.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:2798
Fixedpatch-debugsource-0:2.7.6-9.el8_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:2798
Fixedpatch-0:2.7.1-12.el7_7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:2964
Fixedpatch-0:2.7.1-12.el7_7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:2964
Fixedpatch-0:2.7.1-12.el7_7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:2964
Fixedpatch-0:2.7.1-12.el7_7.src as a component of Red Hat Enterprise Linux Client (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:2964
Fixedpatch-0:2.7.1-12.el7_7.src as a component of Red Hat Enterprise Linux ComputeNode (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:2964
Fixedpatch-0:2.7.1-12.el7_7.src as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:2964
Fixedpatch-0:2.7.1-12.el7_7.src as a component of Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:2964
Fixedpatch-0:2.7.1-12.el7_7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:2964
Fixedpatch-0:2.7.1-12.el7_7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:2964
Fixedpatch-0:2.7.1-12.el7_7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:2964
Fixedpatch-0:2.7.1-12.el7_7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:2964
Fixedpatch-debuginfo-0:2.7.1-12.el7_7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:2964
Fixedpatch-debuginfo-0:2.7.1-12.el7_7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:2964
Fixedpatch-debuginfo-0:2.7.1-12.el7_7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:2964
Fixedpatch-debuginfo-0:2.7.1-12.el7_7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:2964
Fixedpatch-debuginfo-0:2.7.1-12.el7_7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:2964
Fixedpatch-debuginfo-0:2.7.1-12.el7_7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:2964
Fixedpatch-debuginfo-0:2.7.1-12.el7_7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:2964
Fixedpatch-0:2.7.1-11.el7_5.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.5)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:3757
Fixedpatch-0:2.7.1-11.el7_5.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.5)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:3757
Fixedpatch-0:2.7.1-11.el7_5.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.5)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:3757
Fixedpatch-0:2.7.1-11.el7_5.src as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.5)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:3757
Fixedpatch-0:2.7.1-11.el7_5.src as a component of Red Hat Enterprise Linux Server EUS (v. 7.5)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:3757
Fixedpatch-0:2.7.1-11.el7_5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.5)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:3757
Fixedpatch-0:2.7.1-11.el7_5.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.5)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:3757
Fixedpatch-debuginfo-0:2.7.1-11.el7_5.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.5)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:3757
Fixedpatch-debuginfo-0:2.7.1-11.el7_5.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.5)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:3757
Fixedpatch-debuginfo-0:2.7.1-11.el7_5.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.5)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:3757
Fixedpatch-debuginfo-0:2.7.1-11.el7_5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.5)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:3757
Fixedpatch-debuginfo-0:2.7.1-11.el7_5.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.5)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:3757
Fixedpatch-0:2.7.1-11.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:3758
Fixedpatch-0:2.7.1-11.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:3758
Fixedpatch-0:2.7.1-11.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:3758
Fixedpatch-0:2.7.1-11.el7_6.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:3758
Fixedpatch-0:2.7.1-11.el7_6.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:3758
Fixedpatch-0:2.7.1-11.el7_6.src as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:3758
Fixedpatch-0:2.7.1-11.el7_6.src as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:3758
Fixedpatch-0:2.7.1-11.el7_6.src as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:3758
Fixedpatch-0:2.7.1-11.el7_6.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:3758
Fixedpatch-0:2.7.1-11.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:3758
Fixedpatch-debuginfo-0:2.7.1-11.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:3758
Fixedpatch-debuginfo-0:2.7.1-11.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:3758
Fixedpatch-debuginfo-0:2.7.1-11.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:3758
Fixedpatch-debuginfo-0:2.7.1-11.el7_6.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:3758
Fixedpatch-debuginfo-0:2.7.1-11.el7_6.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:3758
Fixedpatch-debuginfo-0:2.7.1-11.el7_6.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:3758
Fixedpatch-debuginfo-0:2.7.1-11.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:3758
Fixedpatch-0:2.7.1-11.el7_4.ppc64le as a component of Red Hat Enterprise Linux Server E4S (v. 7.4)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:4061
Fixedpatch-0:2.7.1-11.el7_4.src as a component of Red Hat Enterprise Linux Server AUS (v. 7.4)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:4061
Fixedpatch-0:2.7.1-11.el7_4.src as a component of Red Hat Enterprise Linux Server E4S (v. 7.4)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:4061
Fixedpatch-0:2.7.1-11.el7_4.src as a component of Red Hat Enterprise Linux Server TUS (v. 7.4)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:4061
Fixedpatch-0:2.7.1-11.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.4)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:4061
Fixedpatch-0:2.7.1-11.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server E4S (v. 7.4)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:4061
Fixedpatch-0:2.7.1-11.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server TUS (v. 7.4)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:4061
Fixedpatch-debuginfo-0:2.7.1-11.el7_4.ppc64le as a component of Red Hat Enterprise Linux Server E4S (v. 7.4)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:4061
Fixedpatch-debuginfo-0:2.7.1-11.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.4)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:4061
Fixedpatch-debuginfo-0:2.7.1-11.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server E4S (v. 7.4)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:4061
Fixedpatch-debuginfo-0:2.7.1-11.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server TUS (v. 7.4)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:4061
FixedFirmware < 2025.0.2 installed on AXC F 1152phoenix_contact_psirt
Update to the latest 2025.0.2 Firmware Release. PHOENIX CONTACT recommends to always use an up-to-date version of the PLCnext Engineer.
FixedFirmware < 2025.0.2 installed on AXC F 2152phoenix_contact_psirt
Update to the latest 2025.0.2 Firmware Release. PHOENIX CONTACT recommends to always use an up-to-date version of the PLCnext Engineer.
FixedFirmware < 2025.0.2 installed on AXC F 3152phoenix_contact_psirt
Update to the latest 2025.0.2 Firmware Release. PHOENIX CONTACT recommends to always use an up-to-date version of the PLCnext Engineer.
FixedFirmware < 2025.0.2 installed on BPC 9102Sphoenix_contact_psirt
Update to the latest 2025.0.2 Firmware Release. PHOENIX CONTACT recommends to always use an up-to-date version of the PLCnext Engineer.
FixedFirmware < 2025.0.2 installed on RFC 4072Sphoenix_contact_psirt
Update to the latest 2025.0.2 Firmware Release. PHOENIX CONTACT recommends to always use an up-to-date version of the PLCnext Engineer.

cvss

Technical severity, 0–10. One row per scoring source.

9.3

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · high–critical · 7.1–9.3

v2.09.3highAV:N/AC:M/Au:N/C:C/I:C/A:Cprimary · NVD / NIST USexploitability 8.6 · impact 10

v3.07.8highCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 1.8 · impact 5.9

v2.09.3criticalAV:N/AC:M/Au:N/C:C/I:C/A:Csecondary · Phoenix Contact PSIRT DE

v3.07.8highCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hsecondary · Phoenix Contact PSIRT DE

v3.07.1highCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

v3.07.8highCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · Red Hat Product Security US

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-78USprimaryCWE-78USCWE-78US

affected products (59)

Products and version ranges known to be affected.

n/a n/a≤ n/aenisa_euvdEU
gnu patch≤ 2.7.6nvdUScpe:2.3:a:gnu:patch:*:*:*:*:*:*:*:*
Firmware 2025.0.2 installed on AXC F 1152all versionsfixedphoenix_contact_psirtDE
Firmware 2025.0.2 installed on AXC F 2152all versionsfixedphoenix_contact_psirtDE
Firmware 2025.0.2 installed on AXC F 3152all versionsfixedphoenix_contact_psirtDE
Firmware 2025.0.2 installed on BPC 9102Sall versionsfixedphoenix_contact_psirtDE
Firmware 2025.0.2 installed on RFC 4072Sall versionsfixedphoenix_contact_psirtDE
Firmware < 2025.0.2 installed on AXC F 1152all versionsphoenix_contact_psirtDE
Firmware < 2025.0.2 installed on AXC F 2152all versionsphoenix_contact_psirtDE
Firmware < 2025.0.2 installed on AXC F 3152all versionsphoenix_contact_psirtDE
Firmware < 2025.0.2 installed on BPC 9102Sall versionsphoenix_contact_psirtDE
Firmware < 2025.0.2 installed on RFC 4072Sall versionsphoenix_contact_psirtDE
patch-0:2.7.1-11.el7_5.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.5)all versionsfixedredhat_csafUS
patch-0:2.7.1-11.el7_5.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.5)all versionsfixedredhat_csafUS
patch-0:2.7.1-11.el7_5.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.5)all versionsfixedredhat_csafUS
patch-0:2.7.1-11.el7_5.src as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.5)all versionsfixedredhat_csafUS
patch-0:2.7.1-11.el7_5.src as a component of Red Hat Enterprise Linux Server EUS (v. 7.5)all versionsfixedredhat_csafUS
patch-0:2.7.1-11.el7_5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.5)all versionsfixedredhat_csafUS
patch-0:2.7.1-11.el7_5.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.5)all versionsfixedredhat_csafUS
patch-0:2.7.1-11.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)all versionsfixedredhat_csafUS

showing 20 of 59

advisories (6)

Vendor and ecosystem advisories describing this.

RHSA-2019:2798Red Hat Security Advisory: patch security update2019-09-19csaf · redhat_csafUS
An update for patch is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
RHSA-2019:2964Red Hat Security Advisory: patch security update2019-10-03csaf · redhat_csafUS
An update for patch is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
RHSA-2019:3757Red Hat Security Advisory: patch security update2019-11-06csaf · redhat_csafUS
An update for patch is now available for Red Hat Enterprise Linux 7.5 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
RHSA-2019:3758Red Hat Security Advisory: patch security update2019-11-06csaf · redhat_csafUS
An update for patch is now available for Red Hat Enterprise Linux 7.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
RHSA-2019:4061Red Hat Security Advisory: patch security update2019-12-03csaf · redhat_csafUS
An update for patch is now available for Red Hat Enterprise Linux 7.4 Advanced Update Support, Red Hat Enterprise Linux 7.4 Telco Extended Update Support, and Red Hat Enterprise Linux 7.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
VDE-2025-053Phoenix Contact: Multiple Vulnerabilities in PLCnext Firmware2025-07-08csaf · phoenix_contact_psirtDE
Multiple Linux component vulnerabilities fixed in latest PLCnext Firmware release 2025.0.2

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd nvd phoenix_contact_psirt redhat_csaf NVD CVE.org MITRE

published 2019-08-16modified 2026-06-17

related (7,948)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2026-106931US	—OT critical	2.53% (85th)	KEV	2026-10-14
SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system r…
CVE-2026-110447US	critical9.8OT critical	11.6% (96th)	KEV	2026-10-14
Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a…
CVE-2026-105134US	critical10.0OT critical	81.8% (100th)	KEV	2026-10-04
A flaw has been found in Ahsay AhsayCBS up to 9.15.2.69/10.3.4.44. This vulnerability affects unknown code of the file /rps/api/json/UpdateReceivers.do of the component Replication…
CVE-2026-83549US	—OT critical	9.89% (96th)	KEV	2026-09-01
Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SMA1000 Appliance Management…
CVE-2026-74233US	critical9.8OT critical	3.37% (89th)	—	2026-08-27
Zbtlink WE1326, WE357, WE5926, WE5926-WD, WE826-Q, WE826-T2, WE826-WD, WG108, and WG3526 firmware 19.1101, Zbtlink WE2426-C firmware 19.1112, Zbtlink WE5926-EC_QP firmware 20.0516,…

+7943 more

references (32)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan