CVE-2025-41769

Unauthenticated Buffer Overflow in PROFINET Service

State: Published
Severity: 9.3 Critical
Published: Aug 12, 2026
Updated: Aug 13, 2026
Reserved: Apr 16, 2025

Description

The device's PROFINET service is affected by a buffer overflow vulnerability that exists in the default configuration. An unauthenticated remote attacker could exploit this vulnerability to reboot the device or execute arbitrary code.

Scores

CVSS	Score	Vector	Source
4.0	9.3 Critical	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N	CERTVDE
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	CERTVDE

Weaknesses

CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected Products

Product	Versions
AXC F 1152Phoenix Contact	2019.0.4 to before 2026.0.3Affected
AXC F 1252Phoenix Contact	2019.0.4 to before 2026.0.3Affected
AXC F 2152Phoenix Contact	2019.0.4 to before 2026.0.3Affected
AXC F 3152Phoenix Contact	2019.0.4 to before 2026.0.3Affected
BPC 9102SPhoenix Contact	2019.0.4 to before 2026.0.3Affected
BPC 9202SPhoenix Contact	2019.0.4 to before 2026.0.3Affected
RFC 4072RPhoenix Contact	2019.0.4 to before 2026.0.3Affected
RFC 4072SPhoenix Contact	2019.0.4 to before 2026.0.3Affected
VL3 UPC 2440 EDGEPhoenix Contact	2019.0.4 to before 2026.0.3Affected
VPLCNEXT CONTROL 1000Phoenix Contact	2019.0.4 to before 2026.0.3Affected
VPLCNEXT CONTROL 2000Phoenix Contact	2019.0.4 to before 2026.0.3Affected
VPLCNEXT CONTROL 3000Phoenix Contact	2019.0.4 to before 2026.0.3Affected
VPLCNEXT CONTROL 500Phoenix Contact	2019.0.4 to before 2026.0.3Affected
EPC 1502Phoenix Contact	2019.0.4 to before 2026.0.3Affected
EPC 1522Phoenix Contact	2019.0.4 to before 2026.0.3Affected

References

https://phoenixcontact.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2025-056.json

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.