BPC 9202S vulnerabilities

2 known vulnerabilities in BPC 9202S from Phoenix Contact. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  AXC F 1152: Allocation of Resources Without Limits or Throttling

  CVE-2025-41770Aug 12, 2026Phoenix Contact

  An unauthenticated denial-of-service vulnerability in the device's PLCnext Engineer communication interface allow an remote attacker to interrupt access via the client application. Successful exploitation prevents communication until the PLCnext service is man

• 9.8 Critical severity

  AXC F 1152: Buffer Copy without Checking Size of Input

  CVE-2025-41769Aug 12, 2026Phoenix Contact

  The device's PROFINET service is affected by a buffer overflow vulnerability that exists in the default configuration. An unauthenticated remote attacker could exploit this vulnerability to reboot the device or execute arbitrary code.