CVE-2025-41670

🗓️ 27 May 2026 07:17:43Reported by CERTVDEType

A low-privilege local user can modify files in writable areas to influence privileged service and escalate.

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2025-41670	27 May 202607:17	–	attackerkb
Circl	CVE-2025-41670	27 May 202607:22	–	circl
CNNVD	Phoenix Contact多款产品代码问题漏洞	27 May 202600:00	–	cnnvd
Cvelist	CVE-2025-41670 Untrusted Search Path	27 May 202607:17	–	cvelist
EUVD	EUVD-2025-209951	27 May 202607:17	–	euvd
NVD	CVE-2025-41670	27 May 202608:16	–	nvd
Positive Technologies	PT-2026-43542	27 May 202600:00	–	ptsecurity
RedhatCVE	CVE-2025-41670	5 Jun 202619:41	–	redhatcve
Vulnrichment	CVE-2025-41670 Untrusted Search Path	27 May 202607:17	–	vulnrichment

Vulners

CNA

Node

phoenixcontact axc_f_1152Range<2026.0.3

phoenixcontact axc_f_1252Range<2026.0.3

phoenixcontact axc_f_2000_eaRange<2026.0.3

phoenixcontact axc_f_2152Range<2026.0.3

phoenixcontact axc_f_3152Range<2026.0.3

phoenixcontact bpc_9102sRange<2026.0.3

phoenixcontact epc_1522Range<2026.0.3

phoenixcontact rfc_4072rRange<2026.0.3

phoenixcontact rfc_4072sRange<2026.0.3

phoenixcontact vl3_upc_2440_edgeRange<2026.0.3

phoenixcontact vplcnext_control_1000Range<2026.0.3

phoenixcontact vplcnext_control_2000Range<2026.0.3

phoenixcontact vplcnext_control_3000Range<2026.0.3

phoenixcontact vplcnext_control_500Range<2026.0.3

[
  {
    "defaultStatus": "unaffected",
    "product": "AXC F 1152",
    "vendor": "Phoenix Contact",
    "versions": [
      {
        "lessThan": "2026.0.3",
        "status": "affected",
        "version": "0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "AXC F 1252",
    "vendor": "Phoenix Contact",
    "versions": [
      {
        "lessThan": "2026.0.3",
        "status": "affected",
        "version": "0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "AXC F 2000 EA",
    "vendor": "Phoenix Contact",
    "versions": [
      {
        "lessThan": "2026.0.3",
        "status": "affected",
        "version": "0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "AXC F 2152",
    "vendor": "Phoenix Contact",
    "versions": [
      {
        "lessThan": "2026.0.3",
        "status": "affected",
        "version": "0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "AXC F 3152",
    "vendor": "Phoenix Contact",
    "versions": [
      {
        "lessThan": "2026.0.3",
        "status": "affected",
        "version": "0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "BPC 9102S",
    "vendor": "Phoenix Contact",
    "versions": [
      {
        "lessThan": "2026.0.3",
        "status": "affected",
        "version": "0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "EPC 1522",
    "vendor": "Phoenix Contact",
    "versions": [
      {
        "lessThan": "2026.0.3",
        "status": "affected",
        "version": "0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "RFC 4072R",
    "vendor": "Phoenix Contact",
    "versions": [
      {
        "lessThan": "2026.0.3",
        "status": "affected",
        "version": "0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "RFC 4072S",
    "vendor": "Phoenix Contact",
    "versions": [
      {
        "lessThan": "2026.0.3",
        "status": "affected",
        "version": "0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "VL3 UPC 2440 EDGE",
    "vendor": "Phoenix Contact",
    "versions": [
      {
        "lessThan": "2026.0.3",
        "status": "affected",
        "version": "0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "VPLCNEXT CONTROL 1000",
    "vendor": "Phoenix Contact",
    "versions": [
      {
        "lessThan": "2026.0.3",
        "status": "affected",
        "version": "0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "VPLCNEXT CONTROL 2000",
    "vendor": "Phoenix Contact",
    "versions": [
      {
        "lessThan": "2026.0.3",
        "status": "affected",
        "version": "0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "VPLCNEXT CONTROL 3000",
    "vendor": "Phoenix Contact",
    "versions": [
      {
        "lessThan": "2026.0.3",
        "status": "affected",
        "version": "0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "VPLCNEXT CONTROL 500",
    "vendor": "Phoenix Contact",
    "versions": [
      {
        "lessThan": "2026.0.3",
        "status": "affected",
        "version": "0.0.0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
certvde	www.certvde.com/en/advisories/VDE-2026-050/

17 Jun 2026 09:22Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.17.8

CVSS 48.7

EPSS0.0019

SSVC

CWE-427