Vulnerability · Published Jul 8, 2025 · Assigned by CERTVDE
CVE-2025-41665Phoenix Contact: DoS of the PLC due to incorrect default permissions possible
Medium 6.5
In plain English
A medium-severity incorrect default permissions in AXC F 1152 from PHOENIX CONTACT. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 30% of all known vulnerabilities).
Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)0.4%top 70.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
An low privileged remote attacker can enforce the watchdog of the affected devices to reboot the PLC due to incorrect default permissions of a config file.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| PHOENIX CONTACT | AXC F 1152 | 0 – before 2025.0.2 |
| PHOENIX CONTACT | AXC F 2152 | 0 – before 2025.0.2 |
| PHOENIX CONTACT | AXC F 3152 | 0 – before 2025.0.2 |
| PHOENIX CONTACT | BPC 9102S | 0 – before 2025.0.2 |
| PHOENIX CONTACT | RFC 4072S | 0 – before 2025.0.2 |
Weakness: CWE-276 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H