The Web-based Management allows a remote low privileged Engineer user to install additional APPs on the device downloaded from the PLCnext Store without implementing any data verification mechanism, leading to the capability for an Engineer user to reach arbitrary code execution with root privileges on the PLC device. A successful exploitation may allow to install a manipulated APP package, potentially impacting integrity and availability of the PLCnext Control.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
AXC F 1152
Vendor
Phoenix Contact
Product
AXC F 1152
Platforms
Unknown
Default status
unaffected
AXC F 1152 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0.0.0
affected
semver
2026.0.3
Unavailable
None listed
AXC F 1252
Vendor
Phoenix Contact
Product
AXC F 1252
Platforms
Unknown
Default status
unaffected
AXC F 1252 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0.0.0
affected
semver
2026.0.3
Unavailable
None listed
AXC F 2000 EA
Vendor
Phoenix Contact
Product
AXC F 2000 EA
Platforms
Unknown
Default status
unaffected
AXC F 2000 EA · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0.0.0
affected
semver
2026.0.3
Unavailable
None listed
AXC F 2152
Vendor
Phoenix Contact
Product
AXC F 2152
Platforms
Unknown
Default status
unaffected
AXC F 2152 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0.0.0
affected
semver
2026.0.3
Unavailable
None listed
AXC F 3152
Vendor
Phoenix Contact
Product
AXC F 3152
Platforms
Unknown
Default status
unaffected
AXC F 3152 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0.0.0
affected
semver
2026.0.3
Unavailable
None listed
BPC 9102S
Vendor
Phoenix Contact
Product
BPC 9102S
Platforms
Unknown
Default status
unaffected
BPC 9102S · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0.0.0
affected
semver
2026.0.3
Unavailable
None listed
EPC 1522
Vendor
Phoenix Contact
Product
EPC 1522
Platforms
Unknown
Default status
unaffected
EPC 1522 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0.0.0
affected
semver
2026.0.3
Unavailable
None listed
RFC 4072R
Vendor
Phoenix Contact
Product
RFC 4072R
Platforms
Unknown
Default status
unaffected
RFC 4072R · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0.0.0
affected
semver
2026.0.3
Unavailable
None listed
RFC 4072S
Vendor
Phoenix Contact
Product
RFC 4072S
Platforms
Unknown
Default status
unaffected
RFC 4072S · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0.0.0
affected
semver
2026.0.3
Unavailable
None listed
VL3 UPC 2440 EDGE
Vendor
Phoenix Contact
Product
VL3 UPC 2440 EDGE
Platforms
Unknown
Default status
unaffected
VL3 UPC 2440 EDGE · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0.0.0
affected
semver
2026.0.3
Unavailable
None listed
VPLCNEXT CONTROL 1000
Vendor
Phoenix Contact
Product
VPLCNEXT CONTROL 1000
Platforms
Unknown
Default status
unaffected
VPLCNEXT CONTROL 1000 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0.0.0
affected
semver
2026.0.3
Unavailable
None listed
VPLCNEXT CONTROL 2000
Vendor
Phoenix Contact
Product
VPLCNEXT CONTROL 2000
Platforms
Unknown
Default status
unaffected
VPLCNEXT CONTROL 2000 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0.0.0
affected
semver
2026.0.3
Unavailable
None listed
VPLCNEXT CONTROL 3000
Vendor
Phoenix Contact
Product
VPLCNEXT CONTROL 3000
Platforms
Unknown
Default status
unaffected
VPLCNEXT CONTROL 3000 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0.0.0
affected
semver
2026.0.3
Unavailable
None listed
VPLCNEXT CONTROL 500
Vendor
Phoenix Contact
Product
VPLCNEXT CONTROL 500
Platforms
Unknown
Default status
unaffected
VPLCNEXT CONTROL 500 · Scoped product and version facts