VulnSocial

CVE-2025-41769Disclosure

LOWCVSS 9.3 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

The device's PROFINET service is affected by a buffer overflow vulnerability that exists in the default configuration. An unauthenticated remote attacker could exploit this vulnerability to reboot the device or execute arbitrary code.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-120

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-08-12: 1Patch / Workaround · 2026-08-12: 1Technical Details · 2026-08-12: 108-12
Signal classification1 categories
Disclosure
1100.0%
Referenced assets1 URL
By indicator
Full discourse1 post
  • ThreatAft@ThreatAft
    Disclosure

    🚨 Phoenix Contact PROFINET — CVSS 9.8 CRITICAL CVE-2025-41769: Buffer overflow in PROFINET service → Unauthenticated RCE → Default configuration → NO PATCH AVAILABLE → http://threataft.com/articles/phoenix-contact-profinet-cve-2025-41769 #cybersecurity #infosec #OTSecurity #ICS #PhoenixContact #PROFINET #ThreatIntel

    Post summary

    A critical PROFINET buffer overflow (CVE-2025-41769) enables unauthenticated RCE in the default configuration, with no patch yet available and no active exploitation or PoC disclosed.

    0000040
    36 followersView on X

Explore more

Back to dashboard