CVE-2025-41666

Phoenix Contact: File access due to the replacement of a critical file used by the watchdog

State: Published
Severity: 8.8 High
Published: Jul 8, 2025
Updated: Jul 8, 2025
Reserved: Apr 16, 2025

Description

A low privileged remote attacker with file access can replace a critical file used by the watchdog to get read, write and execute access to any file on the device after the watchdog has been initialized.

Scores

CVSS	Score	Vector	Source
3.1	8.8 High	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	CERTVDE

Weaknesses

CWE-59 Improper Link Resolution Before File Access ('Link Following')

Affected Products

Product	Versions
AXC F 1152PHOENIX CONTACT	before 2025.0.2Affected
AXC F 2152PHOENIX CONTACT	before 2025.0.2Affected
AXC F 3152PHOENIX CONTACT	before 2025.0.2Affected
BPC 9102SPHOENIX CONTACT	before 2025.0.2Affected
RFC 4072SPHOENIX CONTACT	before 2025.0.2Affected

References

https://certvde.com/en/advisories/VDE-2025-054

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.