Medium · 6.5 CVE-2025-41665 EUVD-2025-20399GHSA-x2c5-vc55-gpgh

Phoenix Contact: DoS of the PLC due to incorrect default permissions possible

Published Jul 8, 2025 · Updated Jul 8, 2025 · Assigned by CERTVDE

Vendor: Phoenix Contact Product: AXC F 1152 Product: AXC F 2152 Product: AXC F 3152 Product: BPC 9102S Product: RFC 4072S Category: ICS / OT

Description

An low privileged remote attacker can enforce the watchdog of the affected devices to reboot the PLC due to incorrect default permissions of a config file.

Affected products

Vendor	Product	Affected	Fixed
PHOENIX CONTACT	AXC F 1152	< 2025.0.2	2025.0.2
PHOENIX CONTACT	AXC F 2152	< 2025.0.2	2025.0.2
PHOENIX CONTACT	AXC F 3152	< 2025.0.2	2025.0.2
PHOENIX CONTACT	BPC 9102S	< 2025.0.2	2025.0.2
PHOENIX CONTACT	RFC 4072S	< 2025.0.2	2025.0.2

Advisories 1

VDE-2025-054 Phoenix Contact: Multiple Vulnerabilities in PLCnext Firmware CERT@VDE · Jul 8, 2025

References

https://certvde.com/en/advisories/VDE-2025-054

CNA	v3.1	6.5
EUVD	v3.1	6.5