CVE-2025-41771: SQL injection

Severity: medium (CVSS 4.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-08-12 · updated 2026-09-29
Weakness: CWE-89

Description

An authenticated attacker with low privileges can access an endpoint in the controller’s web interface that is vulnerable to SQL injection. The vulnerability affects a SQLite database used only for storing notification messages. Therefore, the impact is limited to the system’s notification functionality.

Affected products

PHOENIX CONTACT AXC F 1152: from 2019.0.4 before 2026.0.3 — fixed in 2026.0.3
Phoenix Contact AXC F 1252: from 2019.0.4 before 2026.0.3 — fixed in 2026.0.3
Phoenix Contact AXC F 2000 EA: from 2019.0.4 before 2026.0.3 — fixed in 2026.0.3
PHOENIX CONTACT AXC F 2152: from 2019.0.4 before 2026.0.3 — fixed in 2026.0.3
PHOENIX CONTACT AXC F 3152: from 2019.0.4 before 2026.0.3 — fixed in 2026.0.3
PHOENIX CONTACT BPC 9102S: from 2019.0.4 before 2026.0.3 — fixed in 2026.0.3
Phoenix Contact BPC 9202S: from 2019.0.4 before 2026.0.3 — fixed in 2026.0.3
Phoenix Contact Catan C1: from 2019.0.4 before 2026.0.3 — fixed in 2026.0.3
Phoenix Contact EPC 1502: from 2019.0.4 before 2026.0.3 — fixed in 2026.0.3
Phoenix Contact EPC 1522: from 2019.0.4 before 2026.0.3 — fixed in 2026.0.3
Phoenix Contact RFC 4072R: from 2019.0.4 before 2026.0.3 — fixed in 2026.0.3
PHOENIX CONTACT RFC 4072S: from 2019.0.4 before 2026.0.3 — fixed in 2026.0.3
Phoenix Contact VL3 UPC 2440 EDGE: from 2019.0.4 before 2026.0.3 — fixed in 2026.0.3
Phoenix Contact VPLCNEXT CONTROL 1000: from 2019.0.4 before 2026.0.3 — fixed in 2026.0.3
Phoenix Contact VPLCNEXT CONTROL 2000: from 2019.0.4 before 2026.0.3 — fixed in 2026.0.3
Phoenix Contact VPLCNEXT CONTROL 3000: from 2019.0.4 before 2026.0.3 — fixed in 2026.0.3
Phoenix Contact VPLCNEXT CONTROL 500: from 2019.0.4 before 2026.0.3 — fixed in 2026.0.3

How to fix

Upgrade to a fixed version: PHOENIX CONTACT AXC F 1152 2026.0.3; Phoenix Contact AXC F 1252 2026.0.3; Phoenix Contact AXC F 2000 EA 2026.0.3; PHOENIX CONTACT AXC F 2152 2026.0.3; PHOENIX CONTACT AXC F 3152 2026.0.3; PHOENIX CONTACT BPC 9102S 2026.0.3; Phoenix Contact BPC 9202S 2026.0.3; Phoenix Contact Catan C1 2026.0.3; Phoenix Contact EPC 1502 2026.0.3; Phoenix Contact EPC 1522 2026.0.3; Phoenix Contact RFC 4072R 2026.0.3; PHOENIX CONTACT RFC 4072S 2026.0.3. Check the vendor advisory for mitigations.

References

https://phoenixcontact.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2025-056.json

Get alerted when CVE-2025-41771 or the next vulnerability affects your stack