Phoenix Contact Axc F 3152
11 CVEs affecting Phoenix Contact Axc F 3152. Latest disclosed: 2026-08-12. Critical: 1, High: 7.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-41769 | Critical | 9.8 | 2026-08-12 | The device's PROFINET service is affected by a buffer overflow vulnerability that exists in the default configuration. An unauthenticated remote attacker could… |
CVE-2025-41669 | High | 8.8 | 2026-05-27 | The Web-based Management allows a remote low privileged Engineer user to install additional APPs on the device downloaded from the PLCnext Store without implem… |
CVE-2025-41668 | High | 8.8 | 2025-07-08 | A low privileged remote attacker with file access can replace a critical file or folder used by the service security-profile to get read, write and execute acc… |
CVE-2025-41667 | High | 8.8 | 2025-07-08 | A low privileged remote attacker with file access can replace a critical file used by the arp-preinit script to get read, write and execute access to any file… |
CVE-2025-41666 | High | 8.8 | 2025-07-08 | A low privileged remote attacker with file access can replace a critical file used by the watchdog to get read, write and execute access to any file on the dev… |
CVE-2023-46142 | High | 8.8 | 2023-12-14 | A incorrect permission assignment for critical resource vulnerability in PLCnext products allows an remote attacker with low privileges to gain full access on… |
CVE-2025-41670 | High | 7.8 | 2026-05-27 | A local user with low privileges may be able to influence the behavior of a privileged system service by manipulating configuration or application-related file… |
CVE-2025-41770 | High | 7.5 | 2026-08-12 | An unauthenticated denial-of-service vulnerability in the device's PLCnext Engineer communication interface allow an remote attacker to interrupt access via th… |
CVE-2025-41665 | Medium | 6.5 | 2025-07-08 | An low privileged remote attacker can enforce the watchdog of the affected devices to reboot the PLC due to incorrect default permissions of a config file. |
CVE-2023-46144 | Medium | 6.5 | 2023-12-14 | A download of code without integrity check vulnerability in PLCnext products allows an remote attacker with low privileges to compromise integrity on the affec… |
CVE-2025-41771 | Medium | 4.3 | 2026-08-12 | An authenticated attacker with low privileges can access an endpoint in the controller’s web interface that is vulnerable to SQL injection. The vulnerability a… |