BPC 9102S
- Software type
- Industrial control
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
As of 11/07/2026, BPC 9102S recorded 3 security vulnerabilities in the last 90 days, of which 2 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of BPC 9102S and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2025-41771SQL injectionCVE-2025-41770Unauthenticated Denial of ServiceCVE-2025-41769Unauthenticated Buffer Overflow in PROFINET ServiceCVE-2025-41670Untrusted Search PathCVE-2025-41669Insufficient Verification of Data Authenticity| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2025-41771SQL injection | Exploitation statusNot exploited | FixYes | Published |
| SeverityMedium |
CVE-2025-41770Unauthenticated Denial of Service | Exploitation statusNot exploited | FixYes | Published08/12/2026 | SeverityHigh |
|---|
CVE-2025-41769Unauthenticated Buffer Overflow in PROFINET Service | Exploitation statusNot exploited | FixYes | Published08/12/2026 | SeverityCritical |
|---|
CVE-2025-41670Untrusted Search Path | Exploitation statusNot exploited | FixYes | Published05/27/2026 | SeverityHigh |
|---|
CVE-2025-41669Insufficient Verification of Data Authenticity | Exploitation statusNot exploited | FixYes | Published05/27/2026 | SeverityHigh |
|---|
CVE-2025-41668Phoenix Contact: File access due to the replacement of a critical file used by the service security-profile | Exploitation statusNot exploited | FixYes | Published07/08/2025 | SeverityHigh |
|---|
CVE-2025-41667Phoenix Contact: File access due to the replacement of a critical file used by the arp-preinit script | Exploitation statusNot exploited | FixYes | Published07/08/2025 | SeverityHigh |
|---|
CVE-2025-41666Phoenix Contact: File access due to the replacement of a critical file used by the watchdog | Exploitation statusNot exploited | FixYes | Published07/08/2025 | SeverityHigh |
|---|
CVE-2025-41665Phoenix Contact: DoS of the PLC due to incorrect default permissions possible | Exploitation statusNot exploited | FixYes | Published07/08/2025 | SeverityMedium |
|---|
CVE-2023-46144PHOENIX CONTACT: PLCnext Control prone to download of code without integrity check | Exploitation statusNot confirmed | FixYes | Published12/14/2023 | SeverityMedium |
|---|
CVE-2023-46142PHOENIX CONTACT: Insufficient Read and Write Protection to Logic and Runtime Data in PLCnext Control | Exploitation statusNot confirmed | FixYes | Published12/14/2023 | SeverityHigh |
|---|
11 Results | Page 1 of 1