Skip to content
OpenAdvisories

Product · Phoenix Contact

EPC 1502

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2025-41771

    SQL injection

    An authenticated attacker with low privileges can access an endpoint in the controller’s web interface that is vulnerable to SQL injection. The vulnerability affects a SQLite database used only for storing notification messages. Therefore, the impact is limit…

    Phoenix Contact RFC 4072S AXC F 2152 BPC 9102S Browsers ICS / OT
  • Medium 6.5
    CVE-2023-46144

    PHOENIX CONTACT: PLCnext Control prone to download of code without integrity check

    A download of code without integrity check vulnerability in PLCnext products allows an remote attacker with low privileges to compromise integrity on the affected engineering station and the connected devices.

    Phoenix Contact AXC F 1152 AXC F 3152 RFC 4072S ICS / OT