What’s Vulnerable › Vulnerabilities

CVE-2025-2813: HTTP Service DoS Vulnerability

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-07-31 · updated 2026-06-17
• Weakness: CWE-770

Description

An unauthenticated remote attacker can cause a Denial of Service by sending a large number of requests to the http service on port 80.

Affected products

• Phoenix Contact AXL F BK EIP: through 1.30
• Phoenix Contact AXL F BK EIP EF: through 1.30
• Phoenix Contact AXL F BK EIP XC: through 1.30
• Phoenix Contact AXL F BK ETH: through 1.31
• Phoenix Contact AXL F BK ETH XC: through 1.31
• Phoenix Contact AXL F BK PN (discontinued): through 1.06
• Phoenix Contact AXL F BK PN TPS: through 1.33
• Phoenix Contact AXL F BK PN TPS XC: through 1.33
• Phoenix Contact AXL F BK PN XC (discontinued): through 1.06
• Phoenix Contact AXL F BK SAS (discontinued): through 1.35
• Phoenix Contact IL EIP BK DI8 DO4 2TX-PAC: through 1.12
• Phoenix Contact IL ETH BK-PAC: through 1.00
• Phoenix Contact IL ETH BK DI8 DO4 2TX-PAC: through 1.42
• Phoenix Contact IL PN BK-PAC: through 1.13

References

• https://certvde.com/en/advisories/VDE-2025-029/

Get alerted when CVE-2025-2813 or the next vulnerability affects your stack