Phoenix Contact PLCnext Firmware Security Profile Vulnerability Allowing Unauthorized File Access

A vulnerability exists in Phoenix Contact PLCnext firmware versions prior to 2025.0.2. It allows low-privileged remote attackers with file access to replace critical files or folders used by the service security-profile. This manipulation can grant read, write, and execute access to any file on the device.

Impact

Exploitation of this vulnerability could lead to unauthorized access and manipulation of critical system files, potentially compromising the availability, integrity, and confidentiality of the PLCnext Control.

Remediation

Users are advised to update to the latest firmware version 2025.0.2. Phoenix Contact recommends always using an up-to-date version of PLCnext Engineer.