CVE-2025-41667 — Phoenix Contact: File access due to the replacement of a critical file used by the arp-preinit script
A low privileged remote attacker with file access can replace a critical file used by the arp-preinit script to get read, write and execute access to any file on the device.
Published: 2025-07-08 · CVSS: 8.8 · CVSS 3.1
A low privileged remote attacker with file access can replace a critical file used by the arp-preinit script to get read, write and execute access to any file on the device.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7