Skip to content
OpenAdvisories

Product · Phoenix Contact

BPC 9102S

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.3
    CVE-2025-41771

    SQL injection

    An authenticated attacker with low privileges can access an endpoint in the controller’s web interface that is vulnerable to SQL injection. The vulnerability affects a SQLite database used only for storing notification messages. Therefore, the impact is limit…

    Phoenix Contact RFC 4072S AXC F 2152 BPC 9102S Browsers ICS / OT
  • Medium 6.5
    CVE-2025-41665

    Phoenix Contact: DoS of the PLC due to incorrect default permissions possible

    An low privileged remote attacker can enforce the watchdog of the affected devices to reboot the PLC due to incorrect default permissions of a config file.

    Phoenix Contact AXC F 1152 AXC F 3152 RFC 4072S ICS / OT
  • Medium 6.5
    CVE-2023-46144

    PHOENIX CONTACT: PLCnext Control prone to download of code without integrity check

    A download of code without integrity check vulnerability in PLCnext products allows an remote attacker with low privileges to compromise integrity on the affected engineering station and the connected devices.

    Phoenix Contact AXC F 1152 AXC F 3152 RFC 4072S ICS / OT