6.5

CVE-2025-41665

An low privileged remote attacker can enforce the watchdog of the affected devices to reboot the PLC due to incorrect default permissions of a config file.

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
This information is available to logged-in users.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
VendorPHOENIX CONTACT
≫
Product AXC F 1152
Default Statusunaffected
Version < 2025.0.2
Version 0
Status affected
VendorPHOENIX CONTACT
≫
Product AXC F 2152
Default Statusunaffected
Version < 2025.0.2
Version 0
Status affected
VendorPHOENIX CONTACT
≫
Product AXC F 3152
Default Statusunaffected
Version < 2025.0.2
Version 0
Status affected
VendorPHOENIX CONTACT
≫
Product BPC 9102S
Default Statusunaffected
Version < 2025.0.2
Version 0
Status affected
VendorPHOENIX CONTACT
≫
Product RFC 4072S
Default Statusunaffected
Version < 2025.0.2
Version 0
Status affected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.11% 0.299
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
info@cert.vde.com 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-276 Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.