{"id":"CVE-2025-41717","aliases":["EUVD-2026-2363","GHSA-2448-826c-4v5m"],"status":"published","title":"Config-Upload Code Injection","description":"An unauthenticated remote attacker can trick a high privileged user into uploading a malicious payload via the config-upload endpoint, leading to code injection as root. This results in a total loss of confidentiality, availability and integrity due to improper control of code generation ('Code Injection’).","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00553,"percentile":0.46528,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-94"],"published":"2026-01-13T07:48:19Z","modified":"2026-06-17T09:23:01Z","products":[{"vendor":"phoenix contact","product":"cloud client 1101t-tx/tx"},{"vendor":"phoenix contact","product":"tc cloud client 1002-4g att"},{"vendor":"phoenix contact","product":"tc cloud client 1002-tx/tx"},{"vendor":"phoenix contact","product":"tc router 2002t-3g"},{"vendor":"phoenix contact","product":"tc router 2002t-4g"},{"vendor":"phoenix contact","product":"tc router 3002t-3g"},{"vendor":"phoenix contact","product":"tc router 3002t-4g"},{"vendor":"phoenix contact","product":"tc router 3002t-4g att"},{"vendor":"phoenix contact","product":"tc router 3002t-4g gl"},{"vendor":"phoenix contact","product":"tc router 3002t-4g vzw"},{"vendor":"phoenix contact","product":"tc router 5004t-5g eu"}],"references":[{"url":"https://certvde.com/de/advisories/VDE-2025-073"},{"url":"http://seclists.org/fulldisclosure/2026/Feb/3"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-41717"},{"url":"https://github.com/advisories/GHSA-2448-826c-4v5m"}],"sources":{"cve":[{"id":"CVE-2025-41717","title":"Config-Upload Code Injection","description":"An unauthenticated remote attacker can trick a high privileged user into uploading a malicious payload via the config-upload endpoint, leading to code injection as root. This results in a total loss of confidentiality, availability and integrity due to improper control of code generation ('Code Injection’).","status":"published","published":"2026-01-13T07:48:19.811Z","modified":"2026-02-05T06:19:46.032Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:32:31.631102Z"}],"euvd":[{"id":"EUVD-2026-2363","description":"An unauthenticated remote attacker can trick a high privileged user into uploading a malicious payload via the config-upload endpoint, leading to code injection as root. This results in a total loss of confidentiality, availability and integrity due to improper control of code generation ('Code Injection’).","status":"published","published":"2026-01-13T07:48:19Z","modified":"2026-02-05T06:19:46Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T19:48:43.720683Z"}],"ghsa":[{"id":"GHSA-2448-826c-4v5m","title":"An unauthenticated remote attacker can trick a high privileged user into uploading a malicious...","description":"An unauthenticated remote attacker can trick a high privileged user into uploading a malicious payload via the config-upload endpoint, leading to code injection as root. This results in a total loss of confidentiality, availability and integrity due to improper control of code generation ('Code Injection’).","status":"published","published":"2026-01-13T09:31:30Z","modified":"2026-02-05T09:31:12Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T15:06:03.410025Z"}],"nvd":[{"id":"CVE-2025-41717","description":"An unauthenticated remote attacker can trick a high privileged user into uploading a malicious payload via the config-upload endpoint, leading to code injection as root. This results in a total loss of confidentiality, availability and integrity due to improper control of code generation ('Code Injection’).","status":"published","published":"2026-01-13T08:16:03.993Z","modified":"2026-06-17T09:23:01.813Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:11:56.616231Z"}]}}