1750 matches found
PT-2022-22241 Ā· Phoenix Contact Ā· Automationworx Software Suite
Name of the Vulnerable Software and Affected Versions: PHOENIX CONTACT Automationworx Software Suite versions up to 1.89 Description: The issue arises from manipulated PC Worx or Config+ files, which could lead to a heap buffer overflow and a read access violation. This might compromise the...
Phoenix Contact FL MGUARD DM å®å Øę¼ę“
PHOENIX CONTACT FL MGUARD DM is centralized device management software for MGUARD devices from PHOENIX CONTACT, Germany, for any number of devices in the field. A security vulnerability exists in the PHOENIX CONTACT FL MGUARD and TC MGUARD driver version 8.9.0 and prior versions, which originates...
PHOENIX CONTACT AUTOMATIONWORX Software Suite ē¼å²åŗéčÆÆę¼ę“
PHOENIX CONTACT AUTOMATIONWORX Software Suite is a comprehensive collection of optimally coordinated software tools for automation systems from PHOENIX CONTACT, Germany. It includes PC Worx, PC Worx EXPRESS, DIAG+, DIAG+NETSCAN, CONFIG+, VISU+, WEBVISIT, AX OPC SERVER. A buffer error vulnerabilit...
CVE-2021-34579
In Phoenix Contact: FL MGUARD DM version 1.12.0 and 1.13.0 access to the Apache web server being installed as part of the FL MGUARD DM on Microsoft Windows does not require login credentials even if configured during installation.Attackers with network access to the Apache web server can download...
CVE-2021-34579
In Phoenix Contact: FL MGUARD DM version 1.12.0 and 1.13.0 access to the Apache web server being installed as part of the FL MGUARD DM on Microsoft Windows does not require login credentials even if configured during installation.Attackers with network access to the Apache web server can download...
Code injection
In Phoenix Contact: FL MGUARD DM version 1.12.0 and 1.13.0 access to the Apache web server being installed as part of the FL MGUARD DM on Microsoft Windows does not require login credentials even if configured during installation.Attackers with network access to the Apache web server can download...
CVE-2021-34579
Phoenix Contact FL MGUARD DM versions 1.12.0 and 1.13.0 expose an Apache web server on Windows without required login, allowing network attackers to download ATV profiles containing sensitive data (e.g., IPsec private keys). The root cause is insufficient access control for the web server embedde...
CVE-2021-34579 PHOENIX CONTACT: FL MGUARD DM version 1.12.0 and 1.13.0 Improper Privilege Management
In Phoenix Contact: FL MGUARD DM version 1.12.0 and 1.13.0 access to the Apache web server being installed as part of the FL MGUARD DM on Microsoft Windows does not require login credentials even if configured during installation.Attackers with network access to the Apache web server can download...
CVE-2021-34579 PHOENIX CONTACT: FL MGUARD DM version 1.12.0 and 1.13.0 Improper Privilege Management
In Phoenix Contact: FL MGUARD DM version 1.12.0 and 1.13.0 access to the Apache web server being installed as part of the FL MGUARD DM on Microsoft Windows does not require login credentials even if configured during installation.Attackers with network access to the Apache web server can download...
Phoenix Contact FL MGUARD DM å®å Øę¼ę“
Phoenix Contact FL MGUARD DM is centralized device management software for MGUARD devices from Phoenix Contact, Germany, for any number of devices in the field. A security vulnerability exists in Phoenix Contact FL MGUARD DM versions 1.12.0 and 1.13.0 that stems from the fact that login credentia...
GHSA-P8F7-22GQ-M7J9 Phoenix before 1.6.14 mishandles check_origin wildcarding
socket/transport.ex in Phoenix before 1.6.14 mishandles checkorigin wildcarding. NOTE: LiveView applications are unaffected by default because of the presence of a LiveView CSRF token...
Phoenix before 1.6.14 mishandles check_origin wildcarding
socket/transport.ex in Phoenix before 1.6.14 mishandles checkorigin wildcarding. NOTE: LiveView applications are unaffected by default because of the presence of a LiveView CSRF token...
CVE-2022-42975
socket/transport.ex in Phoenix before 1.6.14 mishandles checkorigin wildcarding. NOTE: LiveView applications are unaffected by default because of the presence of a LiveView CSRF token...
Cross site request forgery (csrf)
socket/transport.ex in Phoenix before 1.6.14 mishandles checkorigin wildcarding. NOTE: LiveView applications are unaffected by default because of the presence of a LiveView CSRF token...
CVE-2022-42975
socket/transport.ex in Phoenix before 1.6.14 mishandles checkorigin wildcarding. NOTE: LiveView applications are unaffected by default because of the presence of a LiveView CSRF token...
CVE-2022-42975
socket/transport.ex in Phoenix before 1.6.14 mishandles checkorigin wildcarding. NOTE: LiveView applications are unaffected by default because of the presence of a LiveView CSRF token...
CVE-2022-42975
socket/transport.ex in Phoenix before 1.6.14 mishandles checkorigin wildcarding. NOTE: LiveView applications are unaffected by default because of the presence of a LiveView CSRF token...
Phoenix framework å®å Øę¼ę“
Phoenix framework is Phoenix framework open source a functional programming language Elixir written in the Web development framework. A security vulnerability exists in Phoenix framework versions prior to 1.6.14, which stems from its socket/transport.ex incorrectly handling the checkorigin wildca...
CVE-2022-42975
Phoenix prior to 1.6.14 contains a vulnerability in socket/transport.ex where check_origin wildcarding is mishandled. LiveView applications are unaffected by default because of the LiveView CSRF token. Affected versions: Phoenix before 1.6.14. Remediation: upgrade to Phoenix 1.6.14 or later or re...
PT-2022-26688 Ā· Phoenix Ā· Phoenix
Name of the Vulnerable Software and Affected Versions: Phoenix versions prior to 1.6.14 Description: The issue arises from the mishandling of check origin wildcarding in the socket/transport.ex file. This does not affect LiveView applications by default due to the presence of a LiveView CSRF toke...