CVE-2019-16675

CVE-2019-16675 affects Phoenix Contact Automation Worx Software Suite (PC Worx, PC Worx Express, Config+) up to version 1.86. The issue is an out-of-bounds read / memory handling vulnerability in parsing project/MBT files (MWT/BCP), caused by insufficient input validation, which can allow remote ...

CVE-2021-33542

CVE-2021-33542 affects Phoenix Contact Classic Automation Worx Software Suite

CVE-2023-46141

CVE-2023-46141 affects Phoenix Contact Automation Worx and classic line controllers. The issue is an incorrect permission assignment for a critical resource that can be exploited remotely by an unauthenticated attacker to gain full control of the affected device. Affects multiple products in the ...

CVE-2020-12497

CVE-2020-12497 affects Phoenix Contact PC Worx and PC Worx Express up to version 1.87. The issue is a stack-based overflow in PLCopen XML file parsing caused by insufficient input validation, which could allow remote code execution when manipulated PC Worx projects are processed. Public sources c...

CVE-2020-12498

Phoenix Contact PC Worx and PC Worx Express (v1.87 and earlier) are affected by CVE-2020-12498 due to insufficient input validation in MWE file parsing, causing an out-of-bounds read that can lead to remote code execution. Affected component: PC Worx/PC Worx Express parsing of MWE project files; ...

CVE-2021-34597

CVE-2021-34597 affects Phoenix Contact PC Worx Automation Suite (up to version 1.88). The root cause is improper input validation in project files, enabling a manipulated project to unpack arbitrary files outside the selected directory. NVD reports CVSS v2 base score 6.8 (NETWORK, partial impact)...

CVE-2023-46143

CVE-2023-46143 affects PHOENIX CONTACT classic line PLCs. The vulnerability stems from inadequate integrity checks when downloading code, allowing an unauthenticated remote attacker to modify some or all PLC applications. Exploitation status is not detailed in the provided sources. Related docume...