Phoenix Contact vulnerabilities
193 CVEs and advisories name Phoenix Contact as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-41696Hardcoded User Password
- CVE-2025-41694Authenticated Denial-of-Service via Webshell
- CVE-2025-41692Weak/Predictable root Password
- CVE-2025-41697Shell access to UART Console
- CVE-2025-41695Reflected XSS vulnerability in dyn_conn.php
- CVE-2025-41745Reflected XSS vulnerability in pxc_portCntr2.php
- CVE-2025-41746Reflected XSS vulnerability in pxc_portSecCfg.php
- CVE-2025-41747Reflected XSS vulnerability in pxc_vlanIntfCfg.php
- CVE-2025-41748Reflected XSS vulnerability in pxc_Dot1xCfg.php
- CVE-2025-41749Reflected XSS vulnerability in port_util.php
- CVE-2025-41750Reflected XSS vulnerability in pxc_PortCfg.php
- CVE-2025-41751Reflected XSS vulnerability in pxc_portCntr.php
- CVE-2025-41752Reflected XSS vulnerability in pxc_portSfp.php
- CVE-2025-41699Phoenix Contact: Security Advisory for CHARX SEC-3xxx charging controllers
- CVE-2025-41707Phoenix Contact: WebSocket Handler Denial of Service
- CVE-2025-41706Phoenix Contact: Webserver Denial of Service through Malformed Content-Length
- CVE-2025-41705Phoenix Contact: WebSocket Message Interception Leaks Webfrontend Credentials
- CVE-2025-41704Phoenix Contact: Unauthenticated Modbus Service DoS via Crafted Function Code
- CVE-2025-41703Phoenix Contact: UPS Shutdown via Unauthenticated Modbus Command
- CVE-2025-41686Improper File Permissions Allow Local Privilege Escalation
- CVE-2025-2813HTTP Service DoS Vulnerability
- CVE-2025-41668Phoenix Contact: File access due to the replacement of a critical file used by the service security-profile
- CVE-2025-41667Phoenix Contact: File access due to the replacement of a critical file used by the arp-preinit script
- CVE-2025-41666Phoenix Contact: File access due to the replacement of a critical file used by the watchdog
- CVE-2025-41665Phoenix Contact: DoS of the PLC due to incorrect default permissions possible
- CVE-2025-25271OCPP Backend Configuration via Insecure Defaults
- CVE-2025-25270Remote Code Execution via Unauthenticated Configuration Manipulation
- CVE-2025-25269Local Privilege Escalation via Unauthenticated Command Injection
- CVE-2025-25268Unauthenticated Configuration Access via Exposed API Endpoint
- CVE-2025-24006Privilege Escalation via Insecure SSH Permissions