Denial-of-Service Vulnerability in PLCnext Engineer by Phoenix Contact
CVE-2025-41770

8.7HIGH

Key Information:

Vendor

Phoenix Contact

Status
Axc F 1152
Axc F 1252
Axc F 2000 Ea
Axc F 2152
Vendor
CVE Published:
12 August 2026

What is CVE-2025-41770?

An unauthenticated denial-of-service vulnerability exists in the communication interface of PLCnext Engineer, allowing remote attackers to disrupt client application access. If exploited, this issue halts all communication until the PLCnext service is restarted manually, leading to potential operational disruptions.

Affected Version(s)

AXC F 1152 2019.0.4 < 2026.0.3

AXC F 1252 2019.0.4 < 2026.0.3

AXC F 2000 EA 2019.0.4 < 2026.0.3

References

https://phoenixcontact.csaf-tp.certvde.com/.well-known/cs...

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

CyberDanube
.