8.8
Élevée
CVE-2025-41667 A low privileged remote attacker with file access can replace a critical file used by the arp-preinit script to get…
Description
A low privileged remote attacker with file access can replace a critical file used by the arp-preinit script to get read, write and execute access to any file on the device.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| AXC F 1152 2025.0 | premières → < 2025.0.2 | 2025.0.2 |
| AXC F 2152 2025.0 | premières → < 2025.0.2 | 2025.0.2 |
| AXC F 3152 2025.0 | premières → < 2025.0.2 | 2025.0.2 |
| BPC 9102S 2025.0 | premières → < 2025.0.2 | 2025.0.2 |
| RFC 4072S 2025.0 | premières → < 2025.0.2 | 2025.0.2 |
Autres CVE de AXC F 1152
Les 11 CVE de AXC F 1152 →
CVE-2025-41771
An authenticated attacker with low privileges can access an endpoint in the controller’s web interface that is…
5.3
Moyenne
CVE-2025-41770
An unauthenticated denial-of-service vulnerability in the device's PLCnext Engineer communication interface allow an…
8.7
Élevée
CVE-2025-41769
The device's PROFINET service is affected by a buffer overflow vulnerability that exists in the default configuration
9.3
Critique
CVE-2025-41669
The Web-based Management allows a remote low privileged Engineer user to install additional APPs on the device…
8.7
Élevée