Skip to content
OpenAdvisories
High · 8.8 CVE-2025-41667 EUVD-2025-20397GHSA-7327-v742-4qwr

Phoenix Contact: File access due to the replacement of a critical file used by the arp-preinit script

Published Jul 8, 2025 · Updated Jul 8, 2025 · Assigned by CERTVDE

Description

A low privileged remote attacker with file access can replace a critical file used by the arp-preinit script to get read, write and execute access to any file on the device.

Affected products

VendorProductAffectedFixed
PHOENIX CONTACT AXC F 1152 < 2025.0.2 2025.0.2
PHOENIX CONTACT AXC F 2152 < 2025.0.2 2025.0.2
PHOENIX CONTACT AXC F 3152 < 2025.0.2 2025.0.2
PHOENIX CONTACT BPC 9102S < 2025.0.2 2025.0.2
PHOENIX CONTACT RFC 4072S < 2025.0.2 2025.0.2

Advisories 1

References