CVE-2025-41769 is a classic buffer overflow vulnerability in the PROFINET service of the Phoenix Contact AXC F 1152 device, specifically affecting version 2019.0.4. The flaw arises from a failure to check the size of input before copying it into a buffer, which can be exploited remotely without authentication. Successful exploitation could lead to device reboot or arbitrary code execution. The vulnerability is rated critical with a CVSS 4.0 score of 9.3, reflecting its network attack vector, no required privileges or user interaction, and high impact on confidentiality, integrity, and availability. No vendor patch or official remediation has been disclosed as of the publication date.

An unauthenticated remote attacker can exploit this buffer overflow vulnerability to cause a denial of service by rebooting the device or potentially execute arbitrary code, which could compromise device control and security. The impact affects confidentiality, integrity, and availability of the device.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider limiting network exposure of the PROFINET service and monitoring for unusual activity related to this device. Do not assume the vulnerability is mitigated without vendor confirmation.