CVE-2025-41770Unauthenticated Denial of Service
Updated under an hour ago ()
Does this affect you?
It affects Phoenix Contact AXC F 1152 and 16 other products. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
An unauthenticated denial-of-service vulnerability in the device's PLCnext Engineer communication interface allow an remote attacker to interrupt access via the client application. Successful exploitation prevents communication until the PLCnext service is manually restarted.
- CVSS
- 7.5 HIGH (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Weakness (CWE)
- CWE-770
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- CERTVDE
- NVD analysis
- Deferred
- Record last updated
- Aug 12, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Phoenix Contact AXC F 1152 phoenix_contact:axc_f_1152 (from the name) | from 2019.0.4 before 2026.0.3 | CNA record |
Phoenix Contact AXC F 1252 phoenix_contact:axc_f_1252 (from the name) | from 2019.0.4 before 2026.0.3 | CNA record |
Phoenix Contact AXC F 2000 EA phoenix_contact:axc_f_2000_ea (from the name) | from 2019.0.4 before 2026.0.3 | CNA record |
Phoenix Contact AXC F 2152 phoenix_contact:axc_f_2152 (from the name) | from 2019.0.4 before 2026.0.3 | CNA record |
Phoenix Contact AXC F 3152 phoenix_contact:axc_f_3152 (from the name) | from 2019.0.4 before 2026.0.3 | CNA record |
Phoenix Contact BPC 9102S phoenix_contact:bpc_9102s (from the name) | from 2019.0.4 before 2026.0.3 | CNA record |
Phoenix Contact BPC 9202S phoenix_contact:bpc_9202s (from the name) | from 2019.0.4 before 2026.0.3 | CNA record |
Phoenix Contact RFC 4072R phoenix_contact:rfc_4072r (from the name) | from 2019.0.4 before 2026.0.3 | CNA record |
Phoenix Contact RFC 4072S phoenix_contact:rfc_4072s (from the name) | from 2019.0.4 before 2026.0.3 | CNA record |
Phoenix Contact VL3 UPC 2440 EDGE phoenix_contact:vl3_upc_2440_edge (from the name) | from 2019.0.4 before 2026.0.3 | CNA record |
Phoenix Contact VPLCNEXT CONTROL 1000 phoenix_contact:vplcnext_control_1000 (from the name) | from 2019.0.4 before 2026.0.3 | CNA record |
Phoenix Contact VPLCNEXT CONTROL 2000 phoenix_contact:vplcnext_control_2000 (from the name) | from 2019.0.4 before 2026.0.3 | CNA record |
Phoenix Contact VPLCNEXT CONTROL 3000 phoenix_contact:vplcnext_control_3000 (from the name) | from 2019.0.4 before 2026.0.3 | CNA record |
Phoenix Contact VPLCNEXT CONTROL 500 phoenix_contact:vplcnext_control_500 (from the name) | from 2019.0.4 before 2026.0.3 | CNA record |
Phoenix Contact Catan C1 phoenix_contact:catan_c1 (from the name) | from 2019.0.4 before 2026.0.3 | CNA record |
Phoenix Contact EPC 1502 phoenix_contact:epc_1502 (from the name) | from 2019.0.4 before 2026.0.3 | CNA record |
Phoenix Contact EPC 1522 phoenix_contact:epc_1522 (from the name) | from 2019.0.4 before 2026.0.3 | CNA record |
References
- https://phoenixcontact.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2025-056.json
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.