Skip to content

Known vulnerabilities in Phoenix Contact EPC 1522

Is your version affected?

CVE Summary Score Published
CVE-2025-41771 An authenticated attacker with low privileges can access an endpoint in the controller’s web interface that is… 5.3 Medium Aug 12, 2026
CVE-2025-41770 An unauthenticated denial-of-service vulnerability in the device's PLCnext Engineer communication interface allow an… 8.7 High Aug 12, 2026
CVE-2025-41769 The device's PROFINET service is affected by a buffer overflow vulnerability that exists in the default configuration 9.3 Critical Aug 12, 2026
CVE-2025-41669 The Web-based Management allows a remote low privileged Engineer user to install additional APPs on the device… 8.7 High May 27, 2026
CVE-2025-41670 A local user with low privileges may be able to influence the behavior of a privileged system service by manipulating… 8.7 High May 27, 2026
CVE-2023-46144 A download of code without integrity check vulnerability in PLCnext products allows an remote attacker with low… 6.5 Medium Dec 14, 2023
CVE-2023-46142 A incorrect permission assignment for critical resource vulnerability in PLCnext products allows an remote attacker with… 8.8 High Dec 14, 2023

Other Phoenix Contact products