What’s Vulnerable › Vulnerabilities

CVE-2025-41769: Unauthenticated Buffer Overflow in PROFINET Service

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-12 · updated 2026-09-29
• Weakness: CWE-120

Description

The device's PROFINET service is affected by a buffer overflow vulnerability that exists in the default configuration. An unauthenticated remote attacker could exploit this vulnerability to reboot the device or execute arbitrary code.

Affected products

• PHOENIX CONTACT AXC F 1152: from 2019.0.4 before 2026.0.3 — fixed in 2026.0.3
• Phoenix Contact AXC F 1252: from 2019.0.4 before 2026.0.3 — fixed in 2026.0.3
• PHOENIX CONTACT AXC F 2152: from 2019.0.4 before 2026.0.3 — fixed in 2026.0.3
• PHOENIX CONTACT AXC F 3152: from 2019.0.4 before 2026.0.3 — fixed in 2026.0.3
• PHOENIX CONTACT BPC 9102S: from 2019.0.4 before 2026.0.3 — fixed in 2026.0.3
• Phoenix Contact BPC 9202S: from 2019.0.4 before 2026.0.3 — fixed in 2026.0.3
• Phoenix Contact EPC 1502: from 2019.0.4 before 2026.0.3 — fixed in 2026.0.3
• Phoenix Contact EPC 1522: from 2019.0.4 before 2026.0.3 — fixed in 2026.0.3
• Phoenix Contact RFC 4072R: from 2019.0.4 before 2026.0.3 — fixed in 2026.0.3
• PHOENIX CONTACT RFC 4072S: from 2019.0.4 before 2026.0.3 — fixed in 2026.0.3
• Phoenix Contact VL3 UPC 2440 EDGE: from 2019.0.4 before 2026.0.3 — fixed in 2026.0.3
• Phoenix Contact VPLCNEXT CONTROL 1000: from 2019.0.4 before 2026.0.3 — fixed in 2026.0.3
• Phoenix Contact VPLCNEXT CONTROL 2000: from 2019.0.4 before 2026.0.3 — fixed in 2026.0.3
• Phoenix Contact VPLCNEXT CONTROL 3000: from 2019.0.4 before 2026.0.3 — fixed in 2026.0.3
• Phoenix Contact VPLCNEXT CONTROL 500: from 2019.0.4 before 2026.0.3 — fixed in 2026.0.3

How to fix

Upgrade to a fixed version: PHOENIX CONTACT AXC F 1152 2026.0.3; Phoenix Contact AXC F 1252 2026.0.3; PHOENIX CONTACT AXC F 2152 2026.0.3; PHOENIX CONTACT AXC F 3152 2026.0.3; PHOENIX CONTACT BPC 9102S 2026.0.3; Phoenix Contact BPC 9202S 2026.0.3; Phoenix Contact EPC 1502 2026.0.3; Phoenix Contact EPC 1522 2026.0.3; Phoenix Contact RFC 4072R 2026.0.3; PHOENIX CONTACT RFC 4072S 2026.0.3; Phoenix Contact VL3 UPC 2440 EDGE 2026.0.3; Phoenix Contact VPLCNEXT CONTROL 1000 2026.0.3. Check the vendor advisory for mitigations.

References

• https://phoenixcontact.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2025-056.json

Get alerted when CVE-2025-41769 or the next vulnerability affects your stack