An unauthenticated remote attacker can trick a high privileged user into uploading a malicious payload via the config-upload endpoint, leading to code injection as root. This results in a total loss of confidentiality, availability and integrity due to improper control of code generation ('Code Injection’).

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00097.

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

Vendors Products
Phoenixcontact Subscribe
Cloud Client 1101t-tx Subscribe
Tc Cloud Client 1002-4g Att Subscribe
Tc Cloud Client 1002-txtx Subscribe
Tc Router 2002t-3g Subscribe
Tc Router 3002t-4g Subscribe
Tc Router 3002t-4g Att Subscribe
Tc Router 3002t-4g Vzw Subscribe
Tc Router 5004t-5g Eu Subscribe

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Phoenixcontact Subscribe
Cloud Client 1101t-tx Subscribe
Tc Cloud Client 1002-4g Att Subscribe
Tc Cloud Client 1002-txtx Subscribe
Tc Router 2002t-3g Subscribe
Tc Router 3002t-4g Subscribe
Tc Router 3002t-4g Att Subscribe
Tc Router 3002t-4g Vzw Subscribe
Tc Router 5004t-5g Eu Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://certvde.com/de/advisories/VDE-2025-073 cve-icon cve-icon
History

Wed, 14 Jan 2026 11:15:00 +0000

Type Values Removed Values Added
First Time appeared Phoenixcontact
Phoenixcontact cloud Client 1101t-tx
Phoenixcontact tc Cloud Client 1002-4g Att
Phoenixcontact tc Cloud Client 1002-txtx
Phoenixcontact tc Router 2002t-3g
Phoenixcontact tc Router 3002t-4g
Phoenixcontact tc Router 3002t-4g Att
Phoenixcontact tc Router 3002t-4g Vzw
Phoenixcontact tc Router 5004t-5g Eu
Vendors & Products Phoenixcontact
Phoenixcontact cloud Client 1101t-tx
Phoenixcontact tc Cloud Client 1002-4g Att
Phoenixcontact tc Cloud Client 1002-txtx
Phoenixcontact tc Router 2002t-3g
Phoenixcontact tc Router 3002t-4g
Phoenixcontact tc Router 3002t-4g Att
Phoenixcontact tc Router 3002t-4g Vzw
Phoenixcontact tc Router 5004t-5g Eu

Tue, 13 Jan 2026 15:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 13 Jan 2026 08:00:00 +0000

Type Values Removed Values Added
Description An unauthenticated remote attacker can trick a high privileged user into uploading a malicious payload via the config-upload endpoint, leading to code injection as root. This results in a total loss of confidentiality, availability and integrity due to improper control of code generation ('Code Injection’).
Title Config-Upload Code Injection
Weaknesses CWE-94
References
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: CERTVDE

Published:

Updated: 2026-01-13T14:22:59.709Z

Reserved: 2025-04-16T11:17:48.313Z

Link: CVE-2025-41717

cve-icon Vulnrichment

Updated: 2026-01-13T14:22:56.870Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-01-13T08:16:03.993

Modified: 2026-01-13T14:03:18.990

Link: CVE-2025-41717

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-01-14T11:09:25Z

Weaknesses