EPSS 0.01 (nejvyšší)
Phoenix Contact: Improper Input Validation Vulnerabilities in PLCnext Firmware
[vde-2025-056] This advisory addresses multiple security vulnerabilities in PLCnext firmware versions prior to 2026.0.3. The vulnerabilities may allow unauthenticated attackers to cause denial of service, trigger unexpected system behavior, or execute unauthorized SQL queries. Successful exploitation could impact the availability, integrity, and confidentiality of affected PLCnext Control devices. All issues are resolved in PLCnext firmware version 2026.0.3.
CVE v události 3
| CVE | hodnocení | KEV | EPSS |
|---|---|---|---|
| CVE-2025-41769 | 9.8 3.1 · CERTVDE 9.3 4.0 · CERTVDE | – | 0.01 |
| CVE-2025-41770 | 8.7 4.0 · CERTVDE 7.5 3.1 · CERTVDE | – | 0.00 |
| CVE-2025-41771 | 5.3 4.0 · CERTVDE 4.3 3.1 · CERTVDE | – | 0.00 |
Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE.
Jak se o tom psalo 1
-
· CERT@VDE DE nadpis události
Phoenix Contact: Improper Input Validation Vulnerabilities in PLCnext Firmware
[vde-2025-056] This advisory addresses multiple security vulnerabilities in PLCnext firmware versions prior to 2026.0.3. The vulnerabilities may allow unauthenticated attackers to cause denial of service, trigger unexpected system behavior, or execute unauthorized SQL queries. Successful exploitation could impact the availability, integrity, and confidentiality of affected PLCnext Control devices. All issues are resolved in PLCnext firmware version 2026.0.3.