Description
A low privileged remote attacker with file access can replace a critical file used by the watchdog to get read, write and execute access to any file on the device after the watchdog has been initialized.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| PHOENIX CONTACT | AXC F 1152 | < 2025.0.2 | 2025.0.2 |
| PHOENIX CONTACT | AXC F 2152 | < 2025.0.2 | 2025.0.2 |
| PHOENIX CONTACT | AXC F 3152 | < 2025.0.2 | 2025.0.2 |
| PHOENIX CONTACT | BPC 9102S | < 2025.0.2 | 2025.0.2 |
| PHOENIX CONTACT | RFC 4072S | < 2025.0.2 | 2025.0.2 |
Advisories 1
- VDE-2025-054 Phoenix Contact: Multiple Vulnerabilities in PLCnext Firmware CERT@VDE · Jul 8, 2025