Skip to contentPhoenix Contact Plcnext vulnerabilities
- phoenix contact plcnext engineerPath traversal in plug-in deploymentCVE-2026-1109358.6 High
- phoenix contact plcnext engineerSigned plug-in validation bypassCVE-2026-1100228.6 High
- phoenix contact plcnext engineerMissing GSDX SignatureValue verificationCVE-2026-1100216.9 Medium
- phoenix contact axc f 1152, axc f 1252, axc f 2000 ea +14 more +16 moreSQL injectionCVE-2025-417715.3 Medium
- phoenix contact axc f 1152, axc f 1252, axc f 2000 ea +14 more +16 moreUnauthenticated Denial of ServiceCVE-2025-417708.7 High
- phoenix contact axc f 1152, axc f 1252, axc f 2152 +12 more +14 moreUnauthenticated Buffer Overflow in PROFINET ServiceCVE-2025-417699.3 Critical
- phoenix contact axc f 1152, axc f 1252, axc f 2000 ea +11 more +13 moreInsufficient Verification of Data AuthenticityCVE-2025-416698.7 High
- phoenix contact axc f 1152, axc f 1252, axc f 2000 ea +11 more +13 moreUntrusted Search PathCVE-2025-416708.7 High
- phoenix contact axc f 1152, axc f 2152, axc f 3152 +14 more +16 morePHOENIX CONTACT: PLCnext Control prone to download of code without integrity checkCVE-2023-461446.5 Medium
- phoenix contact axc f 1152, axc f 2152, axc f 3152 +14 more +16 morePHOENIX CONTACT: Insufficient Read and Write Protection to Logic and Runtime Data in PLCnext ControlCVE-2023-461428.8 High
- phoenix contact plcnext, ietf rfc, phoenix contact axc f +6 more +8 morePhoenix Contact: DoS for PLCnext Control devices in versions prior to 2021.0.5 LTSCVE-2021-345707.5 High
- phoenix contact axc f 1152 (1151412), axc f 2152 (2404267), axc f 2152 starterkit (1046568) +4 more +6 morePhoenix Contact PLCnext Control Devices versions before 2021.0 LTS: A specially crafted LLDP packet may lead to a high system load in the PROFINET stack.CVE-2020-125216.5 Medium
- phoenix contact axc f 1152 (1151412), axc f 2152 (2404267), axc f 2152 starterkit (1046568) +4 more +6 morePhoenix Contact PLCnext Control Devices versions before 2021.0 LTS: An attacker can use this vulnerability i.e. to open a reverse shell with root privileges.CVE-2020-125198.8 High
- phoenix contact axc f 1152 (1151412), axc f 2152 (2404267), axc f 2152 starterkit (1046568) +4 more +6 morePhoenix Contact PLCnext Control Devices versions before 2021.0 LTS: An attacker can use the knowledge gained by reading the insufficiently protected sensitive information to plan further attacks.CVE-2020-125185.5 Medium
- phoenix contact axc f 1152 (1151412), axc f 2152 (2404267), axc f 2152 starterkit (1046568) +4 more +6 morePhoenix Contact PLCnext Control Devices versions before 2021.0 LTS: An authenticated low privileged user could embed malicious Javascript code to gain admin rights when the admin user visits the vulne…CVE-2020-125178.8 High
- phoenix contact plcnext engineerPHOENIX CONTACT PLCnext Engineer version 2020.3.1 and earlier: Improper path sanitation vulnerability.CVE-2020-124998.2 High