CVE-2025-41668
A low privileged remote attacker with file access can replace a critical file or folder used by the service security-profile to get read, write and execute access to any file on the device.
Scoring
- Severity
- HIGH
- CVSS base score
- 8.8
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- EPSS probability
- 0.51%
- CWE
- CWE-59
- Published
- 2025-07-08
- Last modified
- 2026-03-12
Affected products
- PHOENIX CONTACT AXC F 1152
- PHOENIX CONTACT AXC F 2152
- PHOENIX CONTACT AXC F 3152
- PHOENIX CONTACT BPC 9102S
- PHOENIX CONTACT RFC 4072S
Weakness type
Related vulnerabilities
- CVE-2026-88265 — Crun: crun: /dev/null symlink follow during stdio reopen allows host bind-mount write and chown
- CVE-2026-88264 — Crun: crun: /dev/console symlink follow allows root-owned file creation outside the rootfs
- CVE-2026-87766 — Bubblewrap: bubblewrap: symlink traversal via /oldroot allows writing files outside sandbox during setup
- CVE-2026-78622 — Improper Link Resolution in Okta Verify for Windows Uninstaller Data Removal
- CVE-2026-81963 — Windows Update Stack Elevation of Privilege Vulnerability
- CVE-2026-69425 — Windows NTFS Tampering Vulnerability
- CVE-2026-69289 — Windows Setup Files Cleanup Elevation of Privilege Vulnerability
- CVE-2026-83999 — Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability