CVE-2025-41717 — Config-Upload Code Injection

Description (CNA)

An unauthenticated remote attacker can trick a high privileged user into uploading a malicious payload via the config-upload endpoint, leading to code injection as root. This results in a total loss of confidentiality, availability and integrity due to improper control of code generation ('Code Injection’).

Affected (CNA)

Vendor / product	Versions
Phoenix Contact / TC ROUTER 3002T-3G	affected 0.0.0 before 3.08.8
Phoenix Contact / TC ROUTER 2002T-3G	affected 0.0.0 before 3.08.8
Phoenix Contact / TC ROUTER 3002T-4G	affected 0.0.0 before 3.08.8
Phoenix Contact / TC ROUTER 3002T-4G GL	affected 0.0.0 before 3.08.8
Phoenix Contact / TC ROUTER 5004T-5G EU	affected 0.0.0 before 1.06.23
Phoenix Contact / TC ROUTER 3002T-4G VZW	affected 0.0.0 before 3.08.8
Phoenix Contact / TC ROUTER 3002T-4G ATT	affected 0.0.0 before 3.08.8
Phoenix Contact / TC ROUTER 2002T-4G	affected 0.0.0 before 3.08.8
Phoenix Contact / CLOUD CLIENT 1101T-TX/TX	affected 0.0.0 before 3.07.7
Phoenix Contact / TC CLOUD CLIENT 1002-4G ATT	affected 0.0.0 before 3.08.8
Phoenix Contact / TC CLOUD CLIENT 1002-TX/TX	affected 0.0.0 before 3.07.7

CWE

CWE-94

References

https://certvde.com/de/advisories/VDE-2025-073

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

http://seclists.org/fulldisclosure/2026/Feb/3