← back
CVE-2025-41665mediumCWE-276

Phoenix Contact: DoS of the PLC due to incorrect default permissions possible

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5epss 0.3%
exploitation probability
0.3%top 77% of all CVEs
observed exploitation
nono source reports it
An low privileged remote attacker can enforce the watchdog of the affected devices to reboot the PLC due to incorrect default permissions of a config file.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H