8.7
High
CVE-2025-41670 A local user with low privileges may be able to influence the behavior of a privileged system service by manipulating…
Description
A local user with low privileges may be able to influence the behavior of a privileged system service by manipulating configuration or application-related files located in user-writable areas of the filesystem. The affected service processes data from locations that are not sufficiently protected against modification by low-privileged users. As the service runs with elevated privileges, successful exploitation may result in a local privilege escalation.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| AXC F 1152 0.0 | 0.0.0 → < 2026.0.3 | 2026.0.3 |
| AXC F 1252 0.0 | 0.0.0 → < 2026.0.3 | 2026.0.3 |
| AXC F 2000 EA 0.0 | 0.0.0 → < 2026.0.3 | 2026.0.3 |
| AXC F 2152 0.0 | 0.0.0 → < 2026.0.3 | 2026.0.3 |
| AXC F 3152 0.0 | 0.0.0 → < 2026.0.3 | 2026.0.3 |
| BPC 9102S 0.0 | 0.0.0 → < 2026.0.3 | 2026.0.3 |
| EPC 1522 0.0 | 0.0.0 → < 2026.0.3 | 2026.0.3 |
| RFC 4072R 0.0 | 0.0.0 → < 2026.0.3 | 2026.0.3 |
| RFC 4072S 0.0 | 0.0.0 → < 2026.0.3 | 2026.0.3 |
Show the 5 other branches Hide the 5 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| VL3 UPC 2440 EDGE 0.0 | 0.0.0 → < 2026.0.3 | 2026.0.3 |
| VPLCNEXT CONTROL 1000 0.0 | 0.0.0 → < 2026.0.3 | 2026.0.3 |
| VPLCNEXT CONTROL 2000 0.0 | 0.0.0 → < 2026.0.3 | 2026.0.3 |
| VPLCNEXT CONTROL 3000 0.0 | 0.0.0 → < 2026.0.3 | 2026.0.3 |
| VPLCNEXT CONTROL 500 0.0 | 0.0.0 → < 2026.0.3 | 2026.0.3 |
Other CVEs of AXC F 1152
The 11 CVEs of AXC F 1152 →
CVE-2025-41771
An authenticated attacker with low privileges can access an endpoint in the controller’s web interface that is…
5.3
Medium
CVE-2025-41770
An unauthenticated denial-of-service vulnerability in the device's PLCnext Engineer communication interface allow an…
8.7
High
CVE-2025-41769
The device's PROFINET service is affected by a buffer overflow vulnerability that exists in the default configuration
9.3
Critical
CVE-2025-41669
The Web-based Management allows a remote low privileged Engineer user to install additional APPs on the device…
8.7
High