Advisories · Technology

Phoenix Contact RFC 4072R.

Every CVE that names Phoenix Contact RFC 4072R among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-41771 CVE record

CVSS 5.3 Medium

SQL injection
- Phoenix Contact AXC F 1152
- Phoenix Contact AXC F 1252
- SQL injection
Not analysed yet 12 Aug 2026
CVE-2025-41770 CVE record

CVSS 8.7 High

Unauthenticated Denial of Service
- Phoenix Contact AXC F 1152
- Phoenix Contact AXC F 1252
- Denial of service
Not analysed yet 12 Aug 2026
CVE-2025-41769 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Unauthenticated Buffer Overflow in PROFINET Service
- Phoenix Contact AXC F 1152
- Phoenix Contact AXC F 1252
- Memory corruption
Not analysed yet 12 Aug 2026
CVE-2025-41669 CVE record

CVSS 8.7 High

Insufficient Verification of Data Authenticity
- Phoenix Contact AXC F 1152
- Phoenix Contact AXC F 1252
- Weak cryptography or TLS
Not analysed yet 27 May 2026
CVE-2025-41670 CVE record

CVSS 8.7 High

Untrusted Search Path
- Phoenix Contact AXC F 1152
- Phoenix Contact AXC F 1252
- CWE-427
Not analysed yet 27 May 2026
CVE-2023-46144 CVE record

CVSS 6.5 Medium

PHOENIX CONTACT: PLCnext Control prone to download of code without integrity check
- PHOENIX CONTACT AXC F 1152
- PHOENIX CONTACT AXC F 2152
- CWE-494
Not analysed yet 14 Dec 2023
CVE-2023-46142 CVE record

CVSS 8.8 High

PHOENIX CONTACT: Insufficient Read and Write Protection to Logic and Runtime Data in PLCnext Control
- PHOENIX CONTACT AXC F 1152
- PHOENIX CONTACT AXC F 2152
- Broken access control
Not analysed yet 14 Dec 2023