SQL Injection Vulnerability in Phoenix Contact's Web Interface Controller

CVE-2025-41771

What is CVE-2025-41771?

An SQL injection vulnerability exists within the web interface controller of Phoenix Contact products, enabling an authenticated attacker with low privileges to exploit an endpoint. This vulnerability allows unauthorized access to a SQLite database dedicated to storing notification messages. While the primary impact is confined to the system’s notification functionality, it underscores the importance of securing web interfaces against potential breaches.

References