CVE-2025-41769: Phoenix Contact Axc F 1152

Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days.

The device's PROFINET service is affected by a buffer overflow vulnerability that exists in the default configuration. An unauthenticated remote attacker could exploit this vulnerability to reboot the device or execute arbitrary code.

Affected products

• Phoenix Contact Axc F 1152: from 2019.0.4, before 2026.0.3 (fixed in 2026.0.3)
• Phoenix Contact Axc F 1252: from 2019.0.4, before 2026.0.3 (fixed in 2026.0.3)
• Phoenix Contact Axc F 2152: from 2019.0.4, before 2026.0.3 (fixed in 2026.0.3)
• Phoenix Contact Axc F 3152: from 2019.0.4, before 2026.0.3 (fixed in 2026.0.3)
• Phoenix Contact Bpc 9102s: from 2019.0.4, before 2026.0.3 (fixed in 2026.0.3)
• Phoenix Contact Bpc 9202s: from 2019.0.4, before 2026.0.3 (fixed in 2026.0.3)
• Phoenix Contact Epc 1502: from 2019.0.4, before 2026.0.3 (fixed in 2026.0.3)
• Phoenix Contact Epc 1522: from 2019.0.4, before 2026.0.3 (fixed in 2026.0.3)
• Phoenix Contact Rfc 4072r: from 2019.0.4, before 2026.0.3 (fixed in 2026.0.3)
• Phoenix Contact Rfc 4072s: from 2019.0.4, before 2026.0.3 (fixed in 2026.0.3)
• Phoenix Contact VL3 Upc 2440 Edge: from 2019.0.4, before 2026.0.3 (fixed in 2026.0.3)
• Phoenix Contact Vplcnext Control 1000: from 2019.0.4, before 2026.0.3 (fixed in 2026.0.3)
• Phoenix Contact Vplcnext Control 2000: from 2019.0.4, before 2026.0.3 (fixed in 2026.0.3)
• Phoenix Contact Vplcnext Control 3000: from 2019.0.4, before 2026.0.3 (fixed in 2026.0.3)
• Phoenix Contact Vplcnext Control 500: from 2019.0.4, before 2026.0.3 (fixed in 2026.0.3)

Published 2026-08-12. Last modified 2026-09-29.