nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2025-41769 CVE-2025-41769
CRITICAL
Unauthenticated Buffer Overflow in PROFINET Service
Record summary
CVE-2025-41769 has a selected CVSS score of 9.3 (critical).
Description
The device's PROFINET service is affected by a buffer overflow vulnerability that exists in the default configuration. An unauthenticated remote attacker could exploit this vulnerability to reboot the device or execute arbitrary code.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableYes
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated Aug 13, 2026 · Source: CVE List
Affected products and versions
Showing 12 of 15| Product | Source | Version range | Status |
|---|---|---|---|
AXC F 1152Browse Phoenix Contact / AXC F 1152Default status: unaffected | CVE List | 2019.0.4 to < 2026.0.3 | affected |
AXC F 1252Browse Phoenix Contact / AXC F 1252Default status: unaffected | CVE List | 2019.0.4 to < 2026.0.3 | affected |
AXC F 2152Browse Phoenix Contact / AXC F 2152Default status: unaffected | CVE List | 2019.0.4 to < 2026.0.3 | affected |
AXC F 3152Browse Phoenix Contact / AXC F 3152Default status: unaffected | CVE List | 2019.0.4 to < 2026.0.3 | affected |
BPC 9102SBrowse Phoenix Contact / BPC 9102SDefault status: unaffected | CVE List | 2019.0.4 to < 2026.0.3 | affected |
BPC 9202SBrowse Phoenix Contact / BPC 9202SDefault status: unaffected | CVE List | 2019.0.4 to < 2026.0.3 | affected |
Default status: unaffected | CVE List | 2019.0.4 to < 2026.0.3 | affected |
Default status: unaffected | CVE List | 2019.0.4 to < 2026.0.3 | affected |
RFC 4072RBrowse Phoenix Contact / RFC 4072RDefault status: unaffected | CVE List | 2019.0.4 to < 2026.0.3 | affected |
RFC 4072SBrowse Phoenix Contact / RFC 4072SDefault status: unaffected | CVE List | 2019.0.4 to < 2026.0.3 | affected |
VL3 UPC 2440 EDGEBrowse Phoenix Contact / VL3 UPC 2440 EDGEDefault status: unaffected | CVE List | 2019.0.4 to < 2026.0.3 | affected |
VPLCNEXT CONTROL 1000Browse Phoenix Contact / VPLCNEXT CONTROL 1000Default status: unaffected | CVE List | 2019.0.4 to < 2026.0.3 | affected |
References
2phoenixcontact.csaf-tp.certvde.com
https://phoenixcontact.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2025-056.json