8.8
High
CVE-2025-41667 A low privileged remote attacker with file access can replace a critical file used by the arp-preinit script to get…
Description
A low privileged remote attacker with file access can replace a critical file used by the arp-preinit script to get read, write and execute access to any file on the device.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| AXC F 1152 2025.0 | earliest → < 2025.0.2 | 2025.0.2 |
| AXC F 2152 2025.0 | earliest → < 2025.0.2 | 2025.0.2 |
| AXC F 3152 2025.0 | earliest → < 2025.0.2 | 2025.0.2 |
| BPC 9102S 2025.0 | earliest → < 2025.0.2 | 2025.0.2 |
| RFC 4072S 2025.0 | earliest → < 2025.0.2 | 2025.0.2 |
Other CVEs of AXC F 1152
The 11 CVEs of AXC F 1152 →
CVE-2025-41771
An authenticated attacker with low privileges can access an endpoint in the controller’s web interface that is…
5.3
Medium
CVE-2025-41770
An unauthenticated denial-of-service vulnerability in the device's PLCnext Engineer communication interface allow an…
8.7
High
CVE-2025-41769
The device's PROFINET service is affected by a buffer overflow vulnerability that exists in the default configuration
9.3
Critical
CVE-2025-41669
The Web-based Management allows a remote low privileged Engineer user to install additional APPs on the device…
8.7
High