CVE-2025-41769: The device's PROFINET service is affected by a buffer overflow vulnerability that exists in the default configuration. An unauthenticated remote attacker could…

PriorityP269critical9.8CVSS 3.1

AVNACLPRNUINSUCHIHAH

EPSS

0.84%

57.5th percentile

The device's PROFINET service is affected by a buffer overflow vulnerability that exists in the default configuration. An unauthenticated remote attacker could exploit this vulnerability to reboot the device or execute arbitrary code.

Affected

15 ranges

Vendor	Product	Version range	Fixed in
phoenix_contact	axc_f_1152	>= 2019.0.4 < 2026.0.3	2026.0.3
phoenix_contact	axc_f_1252	>= 2019.0.4 < 2026.0.3	2026.0.3
phoenix_contact	axc_f_2152	>= 2019.0.4 < 2026.0.3	2026.0.3
phoenix_contact	axc_f_3152	>= 2019.0.4 < 2026.0.3	2026.0.3
phoenix_contact	bpc_9102s	>= 2019.0.4 < 2026.0.3	2026.0.3
phoenix_contact	bpc_9202s	>= 2019.0.4 < 2026.0.3	2026.0.3
phoenix_contact	epc_1502	>= 2019.0.4 < 2026.0.3	2026.0.3
phoenix_contact	epc_1522	>= 2019.0.4 < 2026.0.3	2026.0.3
phoenix_contact	rfc_4072r	>= 2019.0.4 < 2026.0.3	2026.0.3
phoenix_contact	rfc_4072s	>= 2019.0.4 < 2026.0.3	2026.0.3
phoenix_contact	vl3_upc_2440_edge	>= 2019.0.4 < 2026.0.3	2026.0.3
phoenix_contact	vplcnext_control_1000	>= 2019.0.4 < 2026.0.3	2026.0.3
phoenix_contact	vplcnext_control_2000	>= 2019.0.4 < 2026.0.3	2026.0.3
phoenix_contact	vplcnext_control_3000	>= 2019.0.4 < 2026.0.3	2026.0.3
phoenix_contact	vplcnext_control_500	>= 2019.0.4 < 2026.0.3	2026.0.3

CVSS provenance

nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvdv4.09.3CRITICALCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.