CVE-2025-41669

🗓️ 27 May 2026 07:18:28Reported by CERTVDEType

Remote low privileged engineer can install unverified PLCnext Store apps, enabling root execution.

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2025-41669	27 May 202607:18	–	attackerkb
Circl	CVE-2025-41669	27 May 202607:22	–	circl
CNNVD	PHOENIX CONTACT多款产品数据伪造问题漏洞	27 May 202600:00	–	cnnvd
Cvelist	CVE-2025-41669 Insufficient Verification of Data Authenticity	27 May 202607:18	–	cvelist
EUVD	EUVD-2025-209952	27 May 202607:18	–	euvd
NVD	CVE-2025-41669	27 May 202608:16	–	nvd
Positive Technologies	PT-2026-43541	27 May 202600:00	–	ptsecurity
RedhatCVE	CVE-2025-41669	5 Jun 202619:41	–	redhatcve
Vulnrichment	CVE-2025-41669 Insufficient Verification of Data Authenticity	27 May 202607:18	–	vulnrichment

Vulners

CNA

Node

phoenixcontact axc_f_1152Range<2026.0.3

phoenixcontact axc_f_1252Range<2026.0.3

phoenixcontact axc_f_2000_eaRange<2026.0.3

phoenixcontact axc_f_2152Range<2026.0.3

phoenixcontact axc_f_3152Range<2026.0.3

phoenixcontact bpc_9102sRange<2026.0.3

phoenixcontact epc_1522Range<2026.0.3

phoenixcontact rfc_4072rRange<2026.0.3

phoenixcontact rfc_4072sRange<2026.0.3

phoenixcontact vl3_upc_2440_edgeRange<2026.0.3

phoenixcontact vplcnext_control_1000Range<2026.0.3

phoenixcontact vplcnext_control_2000Range<2026.0.3

phoenixcontact vplcnext_control_3000Range<2026.0.3

phoenixcontact vplcnext_control_500Range<2026.0.3

[
  {
    "defaultStatus": "unaffected",
    "product": "AXC F 1152",
    "vendor": "Phoenix Contact",
    "versions": [
      {
        "lessThan": "2026.0.3",
        "status": "affected",
        "version": "0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "AXC F 1252",
    "vendor": "Phoenix Contact",
    "versions": [
      {
        "lessThan": "2026.0.3",
        "status": "affected",
        "version": "0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "AXC F 2000 EA",
    "vendor": "Phoenix Contact",
    "versions": [
      {
        "lessThan": "2026.0.3",
        "status": "affected",
        "version": "0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "AXC F 2152",
    "vendor": "Phoenix Contact",
    "versions": [
      {
        "lessThan": "2026.0.3",
        "status": "affected",
        "version": "0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "AXC F 3152",
    "vendor": "Phoenix Contact",
    "versions": [
      {
        "lessThan": "2026.0.3",
        "status": "affected",
        "version": "0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "BPC 9102S",
    "vendor": "Phoenix Contact",
    "versions": [
      {
        "lessThan": "2026.0.3",
        "status": "affected",
        "version": "0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "EPC 1522",
    "vendor": "Phoenix Contact",
    "versions": [
      {
        "lessThan": "2026.0.3",
        "status": "affected",
        "version": "0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "RFC 4072R",
    "vendor": "Phoenix Contact",
    "versions": [
      {
        "lessThan": "2026.0.3",
        "status": "affected",
        "version": "0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "RFC 4072S",
    "vendor": "Phoenix Contact",
    "versions": [
      {
        "lessThan": "2026.0.3",
        "status": "affected",
        "version": "0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "VL3 UPC 2440 EDGE",
    "vendor": "Phoenix Contact",
    "versions": [
      {
        "lessThan": "2026.0.3",
        "status": "affected",
        "version": "0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "VPLCNEXT CONTROL 1000",
    "vendor": "Phoenix Contact",
    "versions": [
      {
        "lessThan": "2026.0.3",
        "status": "affected",
        "version": "0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "VPLCNEXT CONTROL 2000",
    "vendor": "Phoenix Contact",
    "versions": [
      {
        "lessThan": "2026.0.3",
        "status": "affected",
        "version": "0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "VPLCNEXT CONTROL 3000",
    "vendor": "Phoenix Contact",
    "versions": [
      {
        "lessThan": "2026.0.3",
        "status": "affected",
        "version": "0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "VPLCNEXT CONTROL 500",
    "vendor": "Phoenix Contact",
    "versions": [
      {
        "lessThan": "2026.0.3",
        "status": "affected",
        "version": "0.0.0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
certvde	www.certvde.com/en/advisories/VDE-2026-050/

17 Jun 2026 09:22Current

6.4Medium risk

Vulners AI Score6.4

CVSS 48.7

CVSS 3.18.8

EPSS0.00218

SSVC

CWE-347