CVE-2025-41666CWE-59

Phoenix Contact: File access due to the replacement of a critical file used by the watchdog

High · published July 8, 2025

CVSS v3.1
8.8
EPSS
1%
Percentile
48.1
In the wild
Unconfirmed
What it is

A low privileged remote attacker with file access can replace a critical file used by the watchdog to get read, write and execute access to any file on the device after the watchdog has been initialized.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00602 · 48.1th percentile
Weakness
CWE-59 · Improper Link Resolution Before File Access ('Link Following')
Published
2025-07-08T07:03Z
EPSS history
Timeline
  • 08 JUL 07:03Z
    Phoenix Contact: File access due to the replacement of a critical file used by the watchdog
    cvelistv5