CVE-2025-41667
A low privileged remote attacker with file access can replace a critical file used by the arp-preinit script to get read, write and execute access to any file on the device.
Scoring
- Severity
- HIGH
- CVSS base score
- 8.8
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- EPSS probability
- 0.52%
- CWE
- CWE-59
- Published
- 2025-07-08
- Last modified
- 2026-03-12
Affected products
- PHOENIX CONTACT AXC F 1152
- PHOENIX CONTACT AXC F 2152
- PHOENIX CONTACT AXC F 3152
- PHOENIX CONTACT BPC 9102S
- PHOENIX CONTACT RFC 4072S
Weakness type
Related vulnerabilities
- CVE-2026-87766 — Bubblewrap: bubblewrap: symlink traversal via /oldroot allows writing files outside sandbox during setup
- CVE-2026-78622 — Improper Link Resolution in Okta Verify for Windows Uninstaller Data Removal
- CVE-2026-81963 — Windows Update Stack Elevation of Privilege Vulnerability
- CVE-2026-69425 — Windows NTFS Tampering Vulnerability
- CVE-2026-69289 — Windows Setup Files Cleanup Elevation of Privilege Vulnerability
- CVE-2026-83999 — Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability
- CVE-2026-70563 — Windows Shell Spoofing Vulnerability
- CVE-2026-69771 — Windows Container Manager Service Security Feature Bypass Vulnerability