CVE-2025-41769 — Unauthenticated Buffer Overflow in PROFINET Service

Description (CNA)

The device's PROFINET service is affected by a buffer overflow vulnerability that exists in the default configuration. An unauthenticated remote attacker could exploit this vulnerability to reboot the device or execute arbitrary code.

Affected (CNA)

Vendor / product	Versions
Phoenix Contact / AXC F 1152	affected 2019.0.4 before 2026.0.3
Phoenix Contact / AXC F 1252	affected 2019.0.4 before 2026.0.3
Phoenix Contact / AXC F 2152	affected 2019.0.4 before 2026.0.3
Phoenix Contact / AXC F 3152	affected 2019.0.4 before 2026.0.3
Phoenix Contact / BPC 9102S	affected 2019.0.4 before 2026.0.3
Phoenix Contact / BPC 9202S	affected 2019.0.4 before 2026.0.3
Phoenix Contact / RFC 4072R	affected 2019.0.4 before 2026.0.3
Phoenix Contact / RFC 4072S	affected 2019.0.4 before 2026.0.3
Phoenix Contact / VL3 UPC 2440 EDGE	affected 2019.0.4 before 2026.0.3
Phoenix Contact / VPLCNEXT CONTROL 1000	affected 2019.0.4 before 2026.0.3
Phoenix Contact / VPLCNEXT CONTROL 2000	affected 2019.0.4 before 2026.0.3
Phoenix Contact / VPLCNEXT CONTROL 3000	affected 2019.0.4 before 2026.0.3
Phoenix Contact / VPLCNEXT CONTROL 500	affected 2019.0.4 before 2026.0.3
Phoenix Contact / EPC 1502	affected 2019.0.4 before 2026.0.3
Phoenix Contact / EPC 1522	affected 2019.0.4 before 2026.0.3

CWE

CWE-120

References

https://phoenixcontact.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2025-056.json

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.