CVE-2025-2813

A vendor fix is available.

• Fixedphoenix_contact_psirt

  Affected bus couplers are designed and developed for the use in closed industrial networks. Phoenix Contact therefore strongly recommends using the devices exclusively in closed networks and protected by a suitable firewall. To further improve security, fixed firmware versions are available for the items listed in the "Fixed" section. A fix for products marked as "discontinued" is not planned. All other listed products will receive a bugfix at the next revision.

• MitigationBosch Rexroth AG R-IL ETH BK DI8 DO4 2TX-PAC (R911171726)bosch_psirt

  If possible, protect your network by blocking access to port 80 on the affected devices.

• MitigationBosch Rexroth AG S20-EIP-BK (R911173904)bosch_psirt

  If possible, protect your network by blocking access to port 80 on the affected devices.

• MitigationBosch Rexroth AG S20-ETH-BK (R911173905)bosch_psirt

  If possible, protect your network by blocking access to port 80 on the affected devices.

• MitigationBosch Rexroth AG S20-PN-BK+ (R911173359)bosch_psirt

  If possible, protect your network by blocking access to port 80 on the affected devices.

• Mitigationphoenix_contact_psirt

  This product was designed for use in closed industrial networks. Phoenix Contact strongly recommends operating network-capable devices in closed networks or protected with a suitable firewall. For detailed information on our recommendations for measures to protect network-capable devices, please refer to our [application note](https://dam-mdc.phoenixcontact.com/asset/156443151564/0a870ae433c19148b80bd760f3a1c1f2/107913_en_03.pdf). If the use of scanners is mandatory for network security in closed production networks, it is recommended to exclude or disable denial of service tests that target port 80. Most network scanners offer options to individually disable certain tests or to apply exclusions by clustering device types and test categorization functions.