CVE-2025-41666
Phoenix Contact: File access due to the replacement of a critical file used by the watchdog
Vexday Risk Score
21Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 8.8EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
08 jul 2025Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
A low privileged remote attacker with file access can replace a critical file used by the watchdog to get read, write and execute access to any file on the device after the watchdog has been initialized.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Productos afectados
PHOENIX CONTACT · AXC F 1152PHOENIX CONTACT · AXC F 2152PHOENIX CONTACT · AXC F 3152PHOENIX CONTACT · BPC 9102SPHOENIX CONTACT · RFC 4072S¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →