CVE-2025-41670

Untrusted Search Path

State: Published
Severity: 8.7 High
Published: May 27, 2026
Updated: May 27, 2026
Reserved: Apr 16, 2025

Description

A local user with low privileges may be able to influence the behavior of a privileged system service by manipulating configuration or application-related files located in user-writable areas of the filesystem. The affected service processes data from locations that are not sufficiently protected against modification by low-privileged users. As the service runs with elevated privileges, successful exploitation may result in a local privilege escalation.

Scores

CVSS	Score	Vector	Source
4.0	8.7 High	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N	CERTVDE
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	CERTVDE

Weaknesses

CWE-427 Uncontrolled Search Path Element

Affected Products

Product	Versions
AXC F 1152Phoenix Contact	0.0.0 to before 2026.0.3Affected
AXC F 1252Phoenix Contact	0.0.0 to before 2026.0.3Affected
AXC F 2000 EAPhoenix Contact	0.0.0 to before 2026.0.3Affected
AXC F 2152Phoenix Contact	0.0.0 to before 2026.0.3Affected
AXC F 3152Phoenix Contact	0.0.0 to before 2026.0.3Affected
BPC 9102SPhoenix Contact	0.0.0 to before 2026.0.3Affected
EPC 1522Phoenix Contact	0.0.0 to before 2026.0.3Affected
RFC 4072RPhoenix Contact	0.0.0 to before 2026.0.3Affected
RFC 4072SPhoenix Contact	0.0.0 to before 2026.0.3Affected
VL3 UPC 2440 EDGEPhoenix Contact	0.0.0 to before 2026.0.3Affected
VPLCNEXT CONTROL 1000Phoenix Contact	0.0.0 to before 2026.0.3Affected
VPLCNEXT CONTROL 2000Phoenix Contact	0.0.0 to before 2026.0.3Affected
VPLCNEXT CONTROL 3000Phoenix Contact	0.0.0 to before 2026.0.3Affected
VPLCNEXT CONTROL 500Phoenix Contact	0.0.0 to before 2026.0.3Affected

References

https://www.certvde.com/en/advisories/VDE-2026-050/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.