nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2025-41770 CVE-2025-41770
HIGH
Unauthenticated Denial of Service
Record summary
CVE-2025-41770 has a selected CVSS score of 8.7 (high).
Description
An unauthenticated denial-of-service vulnerability in the device's PLCnext Engineer communication interface allow an remote attacker to interrupt access via the client application. Successful exploitation prevents communication until the PLCnext service is manually restarted.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableYes
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Aug 12, 2026 · Source: CVE List
Affected products and versions
Showing 12 of 17| Product | Source | Version range | Status |
|---|---|---|---|
AXC F 1152Browse Phoenix Contact / AXC F 1152Default status: unaffected | CVE List | 2019.0.4 to < 2026.0.3 | affected |
AXC F 1252Browse Phoenix Contact / AXC F 1252Default status: unaffected | CVE List | 2019.0.4 to < 2026.0.3 | affected |
AXC F 2000 EABrowse Phoenix Contact / AXC F 2000 EADefault status: unaffected | CVE List | 2019.0.4 to < 2026.0.3 | affected |
AXC F 2152Browse Phoenix Contact / AXC F 2152Default status: unaffected | CVE List | 2019.0.4 to < 2026.0.3 | affected |
AXC F 3152Browse Phoenix Contact / AXC F 3152Default status: unaffected | CVE List | 2019.0.4 to < 2026.0.3 | affected |
BPC 9102SBrowse Phoenix Contact / BPC 9102SDefault status: unaffected | CVE List | 2019.0.4 to < 2026.0.3 | affected |
BPC 9202SBrowse Phoenix Contact / BPC 9202SDefault status: unaffected | CVE List | 2019.0.4 to < 2026.0.3 | affected |
Default status: unaffected | CVE List | 2019.0.4 to < 2026.0.3 | affected |
Default status: unaffected | CVE List | 2019.0.4 to < 2026.0.3 | affected |
Default status: unaffected | CVE List | 2019.0.4 to < 2026.0.3 | affected |
RFC 4072RBrowse Phoenix Contact / RFC 4072RDefault status: unaffected | CVE List | 2019.0.4 to < 2026.0.3 | affected |
RFC 4072SBrowse Phoenix Contact / RFC 4072SDefault status: unaffected | CVE List | 2019.0.4 to < 2026.0.3 | affected |
References
2phoenixcontact.csaf-tp.certvde.com
https://phoenixcontact.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2025-056.json