CVE-2025-41665 — Phoenix Contact: DoS of the PLC due to incorrect default permissions possible

CVE-2025-41665

Phoenix Contact: DoS of the PLC due to incorrect default permissions possible PUBLISHED

Description (CNA)

An low privileged remote attacker can enforce the watchdog of the affected devices to reboot the PLC due to incorrect default permissions of a config file.

Affected (CNA)

Vendor / product	Versions
PHOENIX CONTACT / AXC F 1152	affected 0 before 2025.0.2
PHOENIX CONTACT / AXC F 2152	affected 0 before 2025.0.2
PHOENIX CONTACT / AXC F 3152	affected 0 before 2025.0.2
PHOENIX CONTACT / BPC 9102S	affected 0 before 2025.0.2
PHOENIX CONTACT / RFC 4072S	affected 0 before 2025.0.2

CWE

CWE-276

References

https://certvde.com/en/advisories/VDE-2025-054

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.