Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.3

Unauthenticated Buffer Overflow in PROFINET Service on Siemens SIMATIC Devices

CVE-2025-41769 · published 2 months ago
Summary

The PROFINET service on some Siemens SIMATIC devices has a security weakness that could allow an attacker to remotely reboot the device or run malicious code. This is particularly concerning for industrial control systems, where a device reboot could disrupt operations. To address this, device manufacturers and users should apply available security updates and follow secure configuration best practices.

What to do
  • Update phoenix contact axc f 1152 to version 2026.0.3 or later.
  • Update phoenix contact axc f 1252 to version 2026.0.3 or later.
  • Update phoenix contact axc f 2152 to version 2026.0.3 or later.
  • Update phoenix contact axc f 3152 to version 2026.0.3 or later.
  • Update phoenix contact bpc 9102s to version 2026.0.3 or later.
  • Update phoenix contact bpc 9202s to version 2026.0.3 or later.
  • Update phoenix contact rfc 4072r to version 2026.0.3 or later.
  • Update phoenix contact rfc 4072s to version 2026.0.3 or later.
  • Update phoenix contact vl3 upc 2440 edge to version 2026.0.3 or later.
  • Update phoenix contact vplcnext control 1000 to version 2026.0.3 or later.
  • Update phoenix contact vplcnext control 2000 to version 2026.0.3 or later.
  • Update phoenix contact vplcnext control 3000 to version 2026.0.3 or later.
  • Update phoenix contact vplcnext control 500 to version 2026.0.3 or later.
  • Update phoenix contact epc 1502 to version 2026.0.3 or later.
  • Update phoenix contact epc 1522 to version 2026.0.3 or later.
Affected software
VendorProductAffected versions
phoenix contact axc f 1152 < 2026.0.3
phoenix contact axc f 1252 < 2026.0.3
phoenix contact axc f 2152 < 2026.0.3
phoenix contact axc f 3152 < 2026.0.3
phoenix contact bpc 9102s < 2026.0.3
phoenix contact bpc 9202s < 2026.0.3
phoenix contact rfc 4072r < 2026.0.3
phoenix contact rfc 4072s < 2026.0.3
phoenix contact vl3 upc 2440 edge < 2026.0.3
phoenix contact vplcnext control 1000 < 2026.0.3
phoenix contact vplcnext control 2000 < 2026.0.3
phoenix contact vplcnext control 3000 < 2026.0.3
phoenix contact vplcnext control 500 < 2026.0.3
phoenix contact epc 1502 < 2026.0.3
phoenix contact epc 1522 < 2026.0.3
Original advisory text
Unauthenticated Buffer Overflow in PROFINET Service
The device's PROFINET service is affected by a buffer overflow vulnerability that exists in the default configuration. An unauthenticated remote attacker could exploit this vulnerability to reboot the device or execute arbitrary code.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker full control
Severity
9.3 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-120Classic Buffer Overflow
Timeline
Published12 Aug 2026
Updated31 Oct 2026
First seen12 Aug 2026
Sources
CVE-2025-41769 · NVD
CVE-2025-41769 · MITRE
Track software like this
Free during beta