CVE-2025-41667 — Phoenix Contact: File access due to the replacement of a critical file used by the arp-preinit script

CVE-2025-41667

Phoenix Contact: File access due to the replacement of a critical file used by the arp-preinit script PUBLISHED

Description (CNA)

A low privileged remote attacker with file access can replace a critical file used by the arp-preinit script to get read, write and execute access to any file on the device.

Affected (CNA)

Vendor / product	Versions
PHOENIX CONTACT / AXC F 1152	affected 0 before 2025.0.2
PHOENIX CONTACT / AXC F 2152	affected 0 before 2025.0.2
PHOENIX CONTACT / AXC F 3152	affected 0 before 2025.0.2
PHOENIX CONTACT / BPC 9102S	affected 0 before 2025.0.2
PHOENIX CONTACT / RFC 4072S	affected 0 before 2025.0.2

CWE

CWE-59

References

https://certvde.com/en/advisories/VDE-2025-054

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.