CVE-2025-41769

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-41769", "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "state": "PUBLISHED", "assignerShortName": "CERTVDE", "dateReserved": "2025-04-16T11:18:45.761Z", "datePublished": "2026-08-12T08:05:54.382Z", "dateUpdated": "2026-08-13T15:39:23.555Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "AXC F 1152", "vendor": "Phoenix Contact", "versions": [{"lessThan": "2026.0.3", "status": "affected", "version": "2019.0.4", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "AXC F 1252", "vendor": "Phoenix Contact", "versions": [{"lessThan": "2026.0.3", "status": "affected", "version": "2019.0.4", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "AXC F 2152", "vendor": "Phoenix Contact", "versions": [{"lessThan": "2026.0.3", "status": "affected", "version": "2019.0.4", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "AXC F 3152", "vendor": "Phoenix Contact", "versions": [{"lessThan": "2026.0.3", "status": "affected", "version": "2019.0.4", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "BPC 9102S", "vendor": "Phoenix Contact", "versions": [{"lessThan": "2026.0.3", "status": "affected", "version": "2019.0.4", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "BPC 9202S", "vendor": "Phoenix Contact", "versions": [{"lessThan": "2026.0.3", "status": "affected", "version": "2019.0.4", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "RFC 4072R", "vendor": "Phoenix Contact", "versions": [{"lessThan": "2026.0.3", "status": "affected", "version": "2019.0.4", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "RFC 4072S", "vendor": "Phoenix Contact", "versions": [{"lessThan": "2026.0.3", "status": "affected", "version": "2019.0.4", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "VL3 UPC 2440 EDGE", "vendor": "Phoenix Contact", "versions": [{"lessThan": "2026.0.3", "status": "affected", "version": "2019.0.4", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "VPLCNEXT CONTROL 1000", "vendor": "Phoenix Contact", "versions": [{"lessThan": "2026.0.3", "status": "affected", "version": "2019.0.4", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "VPLCNEXT CONTROL 2000", "vendor": "Phoenix Contact", "versions": [{"lessThan": "2026.0.3", "status": "affected", "version": "2019.0.4", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "VPLCNEXT CONTROL 3000", "vendor": "Phoenix Contact", "versions": [{"lessThan": "2026.0.3", "status": "affected", "version": "2019.0.4", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "VPLCNEXT CONTROL 500", "vendor": "Phoenix Contact", "versions": [{"lessThan": "2026.0.3", "status": "affected", "version": "2019.0.4", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "EPC 1502", "vendor": "Phoenix Contact", "versions": [{"lessThan": "2026.0.3", "status": "affected", "version": "2019.0.4", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "EPC 1522", "vendor": "Phoenix Contact", "versions": [{"lessThan": "2026.0.3", "status": "affected", "version": "2019.0.4", "versionType": "semver"}]}], "cpeApplicability": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:phoenix_contact:axc_f_1152_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding": "2026.0.3", "versionStartIncluding": "2019.0.4", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "OR"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:phoenix_contact:axc_f_1252_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding": "2026.0.3", "versionStartIncluding": "2019.0.4", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "OR"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:phoenix_contact:axc_f_2152_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding": "2026.0.3", "versionStartIncluding": "2019.0.4", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "OR"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:phoenix_contact:axc_f_3152_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding": "2026.0.3", "versionStartIncluding": "2019.0.4", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "OR"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:phoenix_contact:bpc_9102s_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding": "2026.0.3", "versionStartIncluding": "2019.0.4", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "OR"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:phoenix_contact:bpc_9202s_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding": "2026.0.3", "versionStartIncluding": "2019.0.4", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "OR"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:phoenix_contact:rfc_4072r_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding": "2026.0.3", "versionStartIncluding": "2019.0.4", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "OR"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:phoenix_contact:rfc_4072s_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding": "2026.0.3", "versionStartIncluding": "2019.0.4", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "OR"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:phoenix_contact:vl3_upc_2440_edge_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding": "2026.0.3", "versionStartIncluding": "2019.0.4", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "OR"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:phoenix_contact:vplcnext_control_1000_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding": "2026.0.3", "versionStartIncluding": "2019.0.4", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "OR"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:phoenix_contact:vplcnext_control_2000_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding": "2026.0.3", "versionStartIncluding": "2019.0.4", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "OR"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:phoenix_contact:vplcnext_control_3000_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding": "2026.0.3", "versionStartIncluding": "2019.0.4", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "OR"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:phoenix_contact:vplcnext_control_500_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding": "2026.0.3", "versionStartIncluding": "2019.0.4", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "OR"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:phoenix_contact:epc_1502_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding": "2026.0.3", "versionStartIncluding": "2019.0.4", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "OR"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:phoenix_contact:epc_1522_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding": "2026.0.3", "versionStartIncluding": "2019.0.4", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "OR"}], "credits": [{"lang": "en", "type": "finder", "value": "CyberDanube"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>The device&#x27;s PROFINET service is affected by a buffer overflow vulnerability that exists in the default configuration. An unauthenticated remote attacker could exploit this vulnerability to reboot the device or execute arbitrary code.</p>"}], "value": "The device's PROFINET service is affected by a buffer overflow vulnerability that exists in the default configuration. An unauthenticated remote attacker could exploit this vulnerability to reboot the device or execute arbitrary code."}], "metrics": [{"cvssV4_0": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "baseScore": 9.3, "baseSeverity": "CRITICAL", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}, {"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-120", "description": "CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "shortName": "CERTVDE", "dateUpdated": "2026-08-12T08:05:54.382Z"}, "references": [{"url": "https://phoenixcontact.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2025-056.json"}], "source": {"advisory": "VDE-2025-056", "defect": ["CERT@VDE#641812"], "discovery": "UNKNOWN"}, "title": "Unauthenticated Buffer Overflow in PROFINET Service", "x_generator": {"engine": "Vulnogram 0.4.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-08-13T15:39:09.824356Z", "id": "CVE-2025-41769", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-13T15:39:23.555Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-41769", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-08-13T15:39:09.824356Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-13T15:39:16.356Z"}}], "cna": {"title": "Unauthenticated Buffer Overflow in PROFINET Service", "source": {"defect": ["CERT@VDE#641812"], "advisory": "VDE-2025-056", "discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "CyberDanube"}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 9.3, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}, {"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Phoenix Contact", "product": "AXC F 1152", "versions": [{"status": "affected", "version": "2019.0.4", "lessThan": "2026.0.3", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Phoenix Contact", "product": "AXC F 1252", "versions": [{"status": "affected", "version": "2019.0.4", "lessThan": "2026.0.3", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Phoenix Contact", "product": "AXC F 2152", "versions": [{"status": "affected", "version": "2019.0.4", "lessThan": "2026.0.3", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Phoenix Contact", "product": "AXC F 3152", "versions": [{"status": "affected", "version": "2019.0.4", "lessThan": "2026.0.3", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Phoenix Contact", "product": "BPC 9102S", "versions": [{"status": "affected", "version": "2019.0.4", "lessThan": "2026.0.3", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Phoenix Contact", "product": "BPC 9202S", "versions": [{"status": "affected", "version": "2019.0.4", "lessThan": "2026.0.3", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Phoenix Contact", "product": "RFC 4072R", "versions": [{"status": "affected", "version": "2019.0.4", "lessThan": "2026.0.3", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Phoenix Contact", "product": "RFC 4072S", "versions": [{"status": "affected", "version": "2019.0.4", "lessThan": "2026.0.3", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Phoenix Contact", "product": "VL3 UPC 2440 EDGE", "versions": [{"status": "affected", "version": "2019.0.4", "lessThan": "2026.0.3", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Phoenix Contact", "product": "VPLCNEXT CONTROL 1000", "versions": [{"status": "affected", "version": "2019.0.4", "lessThan": "2026.0.3", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Phoenix Contact", "product": "VPLCNEXT CONTROL 2000", "versions": [{"status": "affected", "version": "2019.0.4", "lessThan": "2026.0.3", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Phoenix Contact", "product": "VPLCNEXT CONTROL 3000", "versions": [{"status": "affected", "version": "2019.0.4", "lessThan": "2026.0.3", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Phoenix Contact", "product": "VPLCNEXT CONTROL 500", "versions": [{"status": "affected", "version": "2019.0.4", "lessThan": "2026.0.3", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Phoenix Contact", "product": "EPC 1502", "versions": [{"status": "affected", "version": "2019.0.4", "lessThan": "2026.0.3", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Phoenix Contact", "product": "EPC 1522", "versions": [{"status": "affected", "version": "2019.0.4", "lessThan": "2026.0.3", "versionType": "semver"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://phoenixcontact.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2025-056.json"}], "x_generator": {"engine": "Vulnogram 0.4.0"}, "descriptions": [{"lang": "en", "value": "The device's PROFINET service is affected by a buffer overflow vulnerability that exists in the default configuration. An unauthenticated remote attacker could exploit this vulnerability to reboot the device or execute arbitrary code.", "supportingMedia": [{"type": "text/html", "value": "<p>The device&#x27;s PROFINET service is affected by a buffer overflow vulnerability that exists in the default configuration. An unauthenticated remote attacker could exploit this vulnerability to reboot the device or execute arbitrary code.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-120", "description": "CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')"}]}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:phoenix_contact:axc_f_1152_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "2026.0.3", "versionStartIncluding": "2019.0.4"}], "operator": "OR"}], "operator": "OR"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:phoenix_contact:axc_f_1252_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "2026.0.3", "versionStartIncluding": "2019.0.4"}], "operator": "OR"}], "operator": "OR"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:phoenix_contact:axc_f_2152_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "2026.0.3", "versionStartIncluding": "2019.0.4"}], "operator": "OR"}], "operator": "OR"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:phoenix_contact:axc_f_3152_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "2026.0.3", "versionStartIncluding": "2019.0.4"}], "operator": "OR"}], "operator": "OR"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:phoenix_contact:bpc_9102s_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "2026.0.3", "versionStartIncluding": "2019.0.4"}], "operator": "OR"}], "operator": "OR"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:phoenix_contact:bpc_9202s_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "2026.0.3", "versionStartIncluding": "2019.0.4"}], "operator": "OR"}], "operator": "OR"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:phoenix_contact:rfc_4072r_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "2026.0.3", "versionStartIncluding": "2019.0.4"}], "operator": "OR"}], "operator": "OR"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:phoenix_contact:rfc_4072s_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "2026.0.3", "versionStartIncluding": "2019.0.4"}], "operator": "OR"}], "operator": "OR"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:phoenix_contact:vl3_upc_2440_edge_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "2026.0.3", "versionStartIncluding": "2019.0.4"}], "operator": "OR"}], "operator": "OR"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:phoenix_contact:vplcnext_control_1000_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "2026.0.3", "versionStartIncluding": "2019.0.4"}], "operator": "OR"}], "operator": "OR"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:phoenix_contact:vplcnext_control_2000_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "2026.0.3", "versionStartIncluding": "2019.0.4"}], "operator": "OR"}], "operator": "OR"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:phoenix_contact:vplcnext_control_3000_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "2026.0.3", "versionStartIncluding": "2019.0.4"}], "operator": "OR"}], "operator": "OR"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:phoenix_contact:vplcnext_control_500_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "2026.0.3", "versionStartIncluding": "2019.0.4"}], "operator": "OR"}], "operator": "OR"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:phoenix_contact:epc_1502_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "2026.0.3", "versionStartIncluding": "2019.0.4"}], "operator": "OR"}], "operator": "OR"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:phoenix_contact:epc_1522_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "2026.0.3", "versionStartIncluding": "2019.0.4"}], "operator": "OR"}], "operator": "OR"}], "providerMetadata": {"orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "shortName": "CERTVDE", "dateUpdated": "2026-08-12T08:05:54.382Z"}}}, "cveMetadata": {"cveId": "CVE-2025-41769", "state": "PUBLISHED", "dateUpdated": "2026-08-13T15:39:23.555Z", "dateReserved": "2025-04-16T11:18:45.761Z", "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "datePublished": "2026-08-12T08:05:54.382Z", "assignerShortName": "CERTVDE"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "AXC F 1152", "vendor": "Phoenix Contact", "versions": [{"lessThan": "2026.0.3", "status": "affected", "version": "2019.0.4", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "AXC F 1252", "vendor": "Phoenix Contact", "versions": [{"lessThan": "2026.0.3", "status": "affected", "version": "2019.0.4", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "AXC F 2152", "vendor": "Phoenix Contact", "versions": [{"lessThan": "2026.0.3", "status": "affected", "version": "2019.0.4", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "AXC F 3152", "vendor": "Phoenix Contact", "versions": [{"lessThan": "2026.0.3", "status": "affected", "version": "2019.0.4", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "BPC 9102S", "vendor": "Phoenix Contact", "versions": [{"lessThan": "2026.0.3", "status": "affected", "version": "2019.0.4", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "BPC 9202S", "vendor": "Phoenix Contact", "versions": [{"lessThan": "2026.0.3", "status": "affected", "version": "2019.0.4", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "RFC 4072R", "vendor": "Phoenix Contact", "versions": [{"lessThan": "2026.0.3", "status": "affected", "version": "2019.0.4", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "RFC 4072S", "vendor": "Phoenix Contact", "versions": [{"lessThan": "2026.0.3", "status": "affected", "version": "2019.0.4", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "VL3 UPC 2440 EDGE", "vendor": "Phoenix Contact", "versions": [{"lessThan": "2026.0.3", "status": "affected", "version": "2019.0.4", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "VPLCNEXT CONTROL 1000", "vendor": "Phoenix Contact", "versions": [{"lessThan": "2026.0.3", "status": "affected", "version": "2019.0.4", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "VPLCNEXT CONTROL 2000", "vendor": "Phoenix Contact", "versions": [{"lessThan": "2026.0.3", "status": "affected", "version": "2019.0.4", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "VPLCNEXT CONTROL 3000", "vendor": "Phoenix Contact", "versions": [{"lessThan": "2026.0.3", "status": "affected", "version": "2019.0.4", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "VPLCNEXT CONTROL 500", "vendor": "Phoenix Contact", "versions": [{"lessThan": "2026.0.3", "status": "affected", "version": "2019.0.4", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "EPC 1502", "vendor": "Phoenix Contact", "versions": [{"lessThan": "2026.0.3", "status": "affected", "version": "2019.0.4", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "EPC 1522", "vendor": "Phoenix Contact", "versions": [{"lessThan": "2026.0.3", "status": "affected", "version": "2019.0.4", "versionType": "semver"}]}], "source": "info@cert.vde.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The device's PROFINET service is affected by a buffer overflow vulnerability that exists in the default configuration. An unauthenticated remote attacker could exploit this vulnerability to reboot the device or execute arbitrary code."}, {"lang": "es", "value": "El servicio PROFINET del dispositivo est\u00e1 afectado por una vulnerabilidad de desbordamiento de b\u00fafer que existe en la configuraci\u00f3n predeterminada. Un atacante remoto no autenticado podr\u00eda explotar esta vulnerabilidad para reiniciar el dispositivo o ejecutar c\u00f3digo arbitrario."}], "id": "CVE-2025-41769", "lastModified": "2026-09-29T11:10:00.150", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "info@cert.vde.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 9.3, "baseSeverity": "CRITICAL", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "info@cert.vde.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-41769", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-08-13T15:39:09.824356Z", "version": "2.0.3"}}]}, "published": "2026-08-12T08:17:11.590", "references": [{"source": "info@cert.vde.com", "url": "https://phoenixcontact.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2025-056.json"}], "sourceIdentifier": "info@cert.vde.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-120"}], "source": "info@cert.vde.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[2019.0.4,2026.0.3)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "AXC F 1152", "source": "cna", "vendor": "Phoenix Contact"}, "product": "axc_f_1152", "vendor": "phoenix_contact"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[2019.0.4,2026.0.3)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "AXC F 1252", "source": "cna", "vendor": "Phoenix Contact"}, "product": "axc_f_1252", "vendor": "phoenix_contact"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[2019.0.4,2026.0.3)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "AXC F 2152", "source": "cna", "vendor": "Phoenix Contact"}, "product": "axc_f_2152", "vendor": "phoenix_contact"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[2019.0.4,2026.0.3)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "AXC F 3152", "source": "cna", "vendor": "Phoenix Contact"}, "product": "axc_f_3152", "vendor": "phoenix_contact"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[2019.0.4,2026.0.3)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "BPC 9102S", "source": "cna", "vendor": "Phoenix Contact"}, "product": "bpc_9102s", "vendor": "phoenix_contact"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[2019.0.4,2026.0.3)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "EPC 1522", "source": "cna", "vendor": "Phoenix Contact"}, "product": "epc_1522", "vendor": "phoenix_contact"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[2019.0.4,2026.0.3)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "RFC 4072R", "source": "cna", "vendor": "Phoenix Contact"}, "product": "rfc_4072r", "vendor": "phoenix_contact"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[2019.0.4,2026.0.3)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "RFC 4072S", "source": "cna", "vendor": "Phoenix Contact"}, "product": "rfc_4072s", "vendor": "phoenix_contact"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[2019.0.4,2026.0.3)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "VL3 UPC 2440 EDGE", "source": "cna", "vendor": "Phoenix Contact"}, "product": "vl3_upc_2440_edge", "vendor": "phoenix_contact"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[2019.0.4,2026.0.3)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "VPLCNEXT CONTROL 1000", "source": "cna", "vendor": "Phoenix Contact"}, "product": "vplcnext_control_1000", "vendor": "phoenix_contact"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[2019.0.4,2026.0.3)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "VPLCNEXT CONTROL 2000", "source": "cna", "vendor": "Phoenix Contact"}, "product": "vplcnext_control_2000", "vendor": "phoenix_contact"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[2019.0.4,2026.0.3)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "VPLCNEXT CONTROL 3000", "source": "cna", "vendor": "Phoenix Contact"}, "product": "vplcnext_control_3000", "vendor": "phoenix_contact"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[2019.0.4,2026.0.3)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "VPLCNEXT CONTROL 500", "source": "cna", "vendor": "Phoenix Contact"}, "product": "vplcnext_control_500", "vendor": "phoenix_contact"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[2019.0.4,2026.0.3)"}}], "enrichment": {"confidence": 98.0, "confidence_source": "matching", "scores": [{"score": 98.0, "source": "matching"}]}, "original": {"product": "EPC 1502", "source": "cna", "vendor": "Phoenix Contact"}, "product": "epc_1502", "vendor": "phoenixcontact"}], "created": "2026-08-12T12:30:03.966188+00:00", "updated": "2026-08-12T16:45:05.871851+00:00", "vendors": ["phoenix_contact", "phoenix_contact$PRODUCT$axc_f_1152", "phoenix_contact$PRODUCT$axc_f_1252", "phoenix_contact$PRODUCT$axc_f_2152", "phoenix_contact$PRODUCT$axc_f_3152", "phoenix_contact$PRODUCT$bpc_9102s", "phoenix_contact$PRODUCT$epc_1522", "phoenix_contact$PRODUCT$rfc_4072r", "phoenix_contact$PRODUCT$rfc_4072s", "phoenix_contact$PRODUCT$vl3_upc_2440_edge", "phoenix_contact$PRODUCT$vplcnext_control_1000", "phoenix_contact$PRODUCT$vplcnext_control_2000", "phoenix_contact$PRODUCT$vplcnext_control_3000", "phoenix_contact$PRODUCT$vplcnext_control_500", "phoenixcontact", "phoenixcontact$PRODUCT$epc_1502"]}