CVE-2025-41669

Name of the Vulnerable Software and Affected Versions PLCnext Control (affected versions not specified)

Description The Web-based Management interface lacks a data verification mechanism when installing additional APPs downloaded from the PLCnext Store. This allows a remote low-privileged Engineer user to install a manipulated APP package, which can lead to arbitrary code execution with root privileges on the PLC device, potentially impacting the integrity and availability of the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.