Description (CNA)
A local user with low privileges may be able to influence the behavior of a privileged system service by manipulating configuration or application-related files located in user-writable areas of the filesystem. The affected service processes data from locations that are not sufficiently protected against modification by low-privileged users. As the service runs with elevated privileges, successful exploitation may result in a local privilege escalation.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Phoenix Contact / AXC F 1152 | affected 0.0.0 before 2026.0.3 |
| Phoenix Contact / AXC F 1252 | affected 0.0.0 before 2026.0.3 |
| Phoenix Contact / AXC F 2000 EA | affected 0.0.0 before 2026.0.3 |
| Phoenix Contact / AXC F 2152 | affected 0.0.0 before 2026.0.3 |
| Phoenix Contact / AXC F 3152 | affected 0.0.0 before 2026.0.3 |
| Phoenix Contact / BPC 9102S | affected 0.0.0 before 2026.0.3 |
| Phoenix Contact / EPC 1522 | affected 0.0.0 before 2026.0.3 |
| Phoenix Contact / RFC 4072R | affected 0.0.0 before 2026.0.3 |
| Phoenix Contact / RFC 4072S | affected 0.0.0 before 2026.0.3 |
| Phoenix Contact / VL3 UPC 2440 EDGE | affected 0.0.0 before 2026.0.3 |
| Phoenix Contact / VPLCNEXT CONTROL 1000 | affected 0.0.0 before 2026.0.3 |
| Phoenix Contact / VPLCNEXT CONTROL 2000 | affected 0.0.0 before 2026.0.3 |
| Phoenix Contact / VPLCNEXT CONTROL 3000 | affected 0.0.0 before 2026.0.3 |
| Phoenix Contact / VPLCNEXT CONTROL 500 | affected 0.0.0 before 2026.0.3 |
CWE
CWE-427
References
ADP enrichment
No English description supplied.
No references supplied.