Skip to content

Known vulnerabilities in Phoenix Contact VPLCNEXT CONTROL 500

Is your version affected?

CVE Summary Score Published
CVE-2025-41771 An authenticated attacker with low privileges can access an endpoint in the controller’s web interface that is… 5.3 Medium Aug 12, 2026
CVE-2025-41770 An unauthenticated denial-of-service vulnerability in the device's PLCnext Engineer communication interface allow an… 8.7 High Aug 12, 2026
CVE-2025-41769 The device's PROFINET service is affected by a buffer overflow vulnerability that exists in the default configuration 9.3 Critical Aug 12, 2026
CVE-2025-41669 The Web-based Management allows a remote low privileged Engineer user to install additional APPs on the device… 8.7 High May 27, 2026
CVE-2025-41670 A local user with low privileges may be able to influence the behavior of a privileged system service by manipulating… 8.7 High May 27, 2026

Other Phoenix Contact products