| CVE-2025-41771 |
An authenticated attacker with low privileges can access an endpoint in the controller’s web interface that is…
|
5.3
Medium
|
Aug 12, 2026 |
| CVE-2025-41770 |
An unauthenticated denial-of-service vulnerability in the device's PLCnext Engineer communication interface allow an…
|
8.7
High
|
Aug 12, 2026 |
| CVE-2025-41769 |
The device's PROFINET service is affected by a buffer overflow vulnerability that exists in the default configuration
|
9.3
Critical
|
Aug 12, 2026 |
| CVE-2025-41669 |
The Web-based Management allows a remote low privileged Engineer user to install additional APPs on the device…
|
8.7
High
|
May 27, 2026 |
| CVE-2025-41670 |
A local user with low privileges may be able to influence the behavior of a privileged system service by manipulating…
|
8.7
High
|
May 27, 2026 |
| CVE-2025-41668 |
A low privileged remote attacker with file access can replace a critical file or folder used by the service…
|
8.8
High
|
Jul 8, 2025 |
| CVE-2025-41667 |
A low privileged remote attacker with file access can replace a critical file used by the arp-preinit script to get…
|
8.8
High
|
Jul 8, 2025 |
| CVE-2025-41666 |
A low privileged remote attacker with file access can replace a critical file used by the watchdog to get read, write…
|
8.8
High
|
Jul 8, 2025 |
| CVE-2025-41665 |
An low privileged remote attacker can enforce the watchdog of the affected devices to reboot the PLC due to incorrect…
|
6.5
Medium
|
Jul 8, 2025 |
| CVE-2023-46144 |
A download of code without integrity check vulnerability in PLCnext products allows an remote attacker with low…
|
6.5
Medium
|
Dec 14, 2023 |
| CVE-2023-46142 |
A incorrect permission assignment for critical resource vulnerability in PLCnext products allows an remote attacker with…
|
8.8
High
|
Dec 14, 2023 |