CVE-2025-41769
CRITICAL
CVSS 9.3
Axc F 1152
Verified Advisory
Buffer overflow in PROFINET service in Phoenix Contact PLCnext firmware (CVE-2025-41769)
RCE
Buffer Overflow
Axc F 1152
Axc F 1252
Axc F 2152
Axc F 3152
Bpc 9102S
Bpc 9202S
Rfc 4072R
Rfc 4072S
Vl3 Upc 2440 Edge
Vplcnext Control 1000
Vplcnext Control 2000
Vplcnext Control 3000
Vplcnext Control 500
Epc 1502
Epc 1522
Phoenix Contact
A buffer overflow vulnerability exists in the PROFINET service of Phoenix Contact PLCnext firmware and is present in the default configuration. An unauthenticated remote attacker can exploit this vulnerability to cause a denial-of-service condition or execute arbitrary code on affected devices. Successful exploitation could impact the availability, integrity, and confidentiality of affected PLCnext Control devices.
Affected versions:
- PLCnext firmware versions prior to 2026.0.3
We recommend updating to: PLCnext firmware version 2026.0.3.
CVSS 9.3 · our assessment: act_now
Reference: https://phoenixcontact.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2025-056.json
Details: https://vuln.today/cve/CVE-2025-41769
Verified by vuln.today against published advisories.
Affected versions
- – PLCnext firmware versions prior to 2026.0.3
Fixed in: PLCnext firmware version 2026.0.3