Unauthenticated Denial of Service
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 2026.0.3
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: yes
- Technical impact: partial
Summary
An unauthenticated denial-of-service vulnerability in the device's PLCnext Engineer communication interface allow an remote attacker to interrupt access via the client application. Successful exploitation prevents communication until the PLCnext service is manually restarted.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: yes · Technical impact: partial
- Record last updated
Affected versions
- Phoenix Contact AXC F 1152
From 2019.0.4 · fixed in 2026.0.3
- Phoenix Contact AXC F 1252
From 2019.0.4 · fixed in 2026.0.3
- Phoenix Contact AXC F 2000 EA
From 2019.0.4 · fixed in 2026.0.3
- Phoenix Contact AXC F 2152
From 2019.0.4 · fixed in 2026.0.3
- Phoenix Contact AXC F 3152
From 2019.0.4 · fixed in 2026.0.3
- Phoenix Contact BPC 9102S
From 2019.0.4 · fixed in 2026.0.3
- Phoenix Contact BPC 9202S
From 2019.0.4 · fixed in 2026.0.3
- Phoenix Contact RFC 4072R
From 2019.0.4 · fixed in 2026.0.3
- Phoenix Contact RFC 4072S
From 2019.0.4 · fixed in 2026.0.3
- Phoenix Contact VL3 UPC 2440 EDGE
From 2019.0.4 · fixed in 2026.0.3
- Phoenix Contact VPLCNEXT CONTROL 1000
From 2019.0.4 · fixed in 2026.0.3
- Phoenix Contact VPLCNEXT CONTROL 2000
From 2019.0.4 · fixed in 2026.0.3
- Phoenix Contact VPLCNEXT CONTROL 3000
From 2019.0.4 · fixed in 2026.0.3
- Phoenix Contact VPLCNEXT CONTROL 500
From 2019.0.4 · fixed in 2026.0.3
- Phoenix Contact Catan C1
From 2019.0.4 · fixed in 2026.0.3
- Phoenix Contact EPC 1502
From 2019.0.4 · fixed in 2026.0.3
- Phoenix Contact EPC 1522
From 2019.0.4 · fixed in 2026.0.3