Log in Start free

Vulnerability · Published May 27, 2026 · Assigned by CERTVDE

CVE-2025-41670Untrusted Search Path

High 7.8

In plain English

A high-severity uncontrolled search path in AXC F 1152 from Phoenix Contact. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 9% of all known vulnerabilities).

Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.2%top 91.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A local user with low privileges may be able to influence the behavior of a privileged system service by manipulating configuration or application-related files located in user-writable areas of the filesystem. The affected service processes data from locations that are not sufficiently protected against modification by low-privileged users. As the service runs with elevated privileges, successful exploitation may result in a local privilege escalation.

Affected products (as reported)

VendorProductVersions
Phoenix Contact AXC F 1152 0.0.0 – before 2026.0.3
Phoenix Contact AXC F 1252 0.0.0 – before 2026.0.3
Phoenix Contact AXC F 2000 EA 0.0.0 – before 2026.0.3
Phoenix Contact AXC F 2152 0.0.0 – before 2026.0.3
Phoenix Contact AXC F 3152 0.0.0 – before 2026.0.3
Phoenix Contact BPC 9102S 0.0.0 – before 2026.0.3
Phoenix Contact EPC 1522 0.0.0 – before 2026.0.3
Phoenix Contact RFC 4072R 0.0.0 – before 2026.0.3
Phoenix Contact RFC 4072S 0.0.0 – before 2026.0.3
Phoenix Contact VL3 UPC 2440 EDGE 0.0.0 – before 2026.0.3
Phoenix Contact VPLCNEXT CONTROL 1000 0.0.0 – before 2026.0.3
Phoenix Contact VPLCNEXT CONTROL 2000 0.0.0 – before 2026.0.3
Phoenix Contact VPLCNEXT CONTROL 3000 0.0.0 – before 2026.0.3
Phoenix Contact VPLCNEXT CONTROL 500 0.0.0 – before 2026.0.3

Weakness: CWE-427 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References