8.7
Élevée
CVE-2025-41670 A local user with low privileges may be able to influence the behavior of a privileged system service by manipulating…
Description
A local user with low privileges may be able to influence the behavior of a privileged system service by manipulating configuration or application-related files located in user-writable areas of the filesystem. The affected service processes data from locations that are not sufficiently protected against modification by low-privileged users. As the service runs with elevated privileges, successful exploitation may result in a local privilege escalation.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| AXC F 1152 0.0 | 0.0.0 → < 2026.0.3 | 2026.0.3 |
| AXC F 1252 0.0 | 0.0.0 → < 2026.0.3 | 2026.0.3 |
| AXC F 2000 EA 0.0 | 0.0.0 → < 2026.0.3 | 2026.0.3 |
| AXC F 2152 0.0 | 0.0.0 → < 2026.0.3 | 2026.0.3 |
| AXC F 3152 0.0 | 0.0.0 → < 2026.0.3 | 2026.0.3 |
| BPC 9102S 0.0 | 0.0.0 → < 2026.0.3 | 2026.0.3 |
| EPC 1522 0.0 | 0.0.0 → < 2026.0.3 | 2026.0.3 |
| RFC 4072R 0.0 | 0.0.0 → < 2026.0.3 | 2026.0.3 |
| RFC 4072S 0.0 | 0.0.0 → < 2026.0.3 | 2026.0.3 |
Afficher les 5 autres branches Masquer les 5 autres branches
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| VL3 UPC 2440 EDGE 0.0 | 0.0.0 → < 2026.0.3 | 2026.0.3 |
| VPLCNEXT CONTROL 1000 0.0 | 0.0.0 → < 2026.0.3 | 2026.0.3 |
| VPLCNEXT CONTROL 2000 0.0 | 0.0.0 → < 2026.0.3 | 2026.0.3 |
| VPLCNEXT CONTROL 3000 0.0 | 0.0.0 → < 2026.0.3 | 2026.0.3 |
| VPLCNEXT CONTROL 500 0.0 | 0.0.0 → < 2026.0.3 | 2026.0.3 |
Autres CVE de AXC F 1152
Les 11 CVE de AXC F 1152 →
CVE-2025-41771
An authenticated attacker with low privileges can access an endpoint in the controller’s web interface that is…
5.3
Moyenne
CVE-2025-41770
An unauthenticated denial-of-service vulnerability in the device's PLCnext Engineer communication interface allow an…
8.7
Élevée
CVE-2025-41769
The device's PROFINET service is affected by a buffer overflow vulnerability that exists in the default configuration
9.3
Critique
CVE-2025-41669
The Web-based Management allows a remote low privileged Engineer user to install additional APPs on the device…
8.7
Élevée