This vulnerability (CWE-770) exists in the PLCnext Engineer communication interface of the Phoenix Contact AXC F 1152 device, version 2019.0.4. An unauthenticated remote attacker can trigger resource exhaustion, leading to denial of service by interrupting access via the client application. The communication service remains unavailable until a manual restart of the PLCnext service is performed. No official patch or remediation guidance has been published by the vendor as of the data provided.

Successful exploitation results in denial of service by interrupting communication with the device's PLCnext Engineer interface. This prevents legitimate client applications from accessing the device until the PLCnext service is manually restarted, potentially causing operational disruption.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, manual restart of the PLCnext service is required to restore communication after an attack. Network-level protections such as limiting access to the PLCnext Engineer interface may reduce exposure.