CVE-2025-41717

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2025
Source publication: Jan 13, 2026
Source updated: Feb 5, 2026
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

Config-Upload Code Injection

An unauthenticated remote attacker can trick a high privileged user into uploading a malicious payload via the config-upload endpoint, leading to code injection as root. This results in a total loss of confidentiality, availability and integrity due to improper control of code generation ('Code Injection’).

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

TC ROUTER 3002T-3G

Vendor: Phoenix Contact
Product: TC ROUTER 3002T-3G
Platforms: Unknown
Default status: unaffected

TC ROUTER 3002T-3G · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0.0.0	`affected`	semver	3.08.8	Unavailable	None listed

TC ROUTER 2002T-3G

Vendor: Phoenix Contact
Product: TC ROUTER 2002T-3G
Platforms: Unknown
Default status: unaffected

TC ROUTER 2002T-3G · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0.0.0	`affected`	semver	3.08.8	Unavailable	None listed

TC ROUTER 3002T-4G

Vendor: Phoenix Contact
Product: TC ROUTER 3002T-4G
Platforms: Unknown
Default status: unaffected

TC ROUTER 3002T-4G · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0.0.0	`affected`	semver	3.08.8	Unavailable	None listed

TC ROUTER 3002T-4G GL

Vendor: Phoenix Contact
Product: TC ROUTER 3002T-4G GL
Platforms: Unknown
Default status: unaffected

TC ROUTER 3002T-4G GL · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0.0.0	`affected`	semver	3.08.8	Unavailable	None listed

TC ROUTER 5004T-5G EU

Vendor: Phoenix Contact
Product: TC ROUTER 5004T-5G EU
Platforms: Unknown
Default status: unaffected

TC ROUTER 5004T-5G EU · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0.0.0	`affected`	semver	1.06.23	Unavailable	None listed

TC ROUTER 3002T-4G VZW

Vendor: Phoenix Contact
Product: TC ROUTER 3002T-4G VZW
Platforms: Unknown
Default status: unaffected

TC ROUTER 3002T-4G VZW · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0.0.0	`affected`	semver	3.08.8	Unavailable	None listed

TC ROUTER 3002T-4G ATT

Vendor: Phoenix Contact
Product: TC ROUTER 3002T-4G ATT
Platforms: Unknown
Default status: unaffected

TC ROUTER 3002T-4G ATT · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0.0.0	`affected`	semver	3.08.8	Unavailable	None listed

TC ROUTER 2002T-4G

Vendor: Phoenix Contact
Product: TC ROUTER 2002T-4G
Platforms: Unknown
Default status: unaffected

TC ROUTER 2002T-4G · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0.0.0	`affected`	semver	3.08.8	Unavailable	None listed

CLOUD CLIENT 1101T-TX/TX

Vendor: Phoenix Contact
Product: CLOUD CLIENT 1101T-TX/TX
Platforms: Unknown
Default status: unaffected

CLOUD CLIENT 1101T-TX/TX · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0.0.0	`affected`	semver	3.07.7	Unavailable	None listed

TC CLOUD CLIENT 1002-4G ATT

Vendor: Phoenix Contact
Product: TC CLOUD CLIENT 1002-4G ATT
Platforms: Unknown
Default status: unaffected

TC CLOUD CLIENT 1002-4G ATT · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0.0.0	`affected`	semver	3.08.8	Unavailable	None listed

TC CLOUD CLIENT 1002-TX/TX

Vendor: Phoenix Contact
Product: TC CLOUD CLIENT 1002-TX/TX
Platforms: Unknown
Default status: unaffected

TC CLOUD CLIENT 1002-TX/TX · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0.0.0	`affected`	semver	3.07.7	Unavailable	None listed