3 matches found
CVE-2020-10939
CVE-2020-10939 affects PHOENIX CONTACT PC WORX SRT up to v1.14. Insecure default path permissions enable local privilege escalation. Documented by multiple sources (NVD entry, Red Hat advisory, CNVD, PRION, etc.). Root cause: insecure default path privileges. Impact: local privilege escalation; C...
CVE-2023-46141
CVE-2023-46141 affects Phoenix Contact Automation Worx and classic line controllers. The issue is an incorrect permission assignment for a critical resource that can be exploited remotely by an unauthenticated attacker to gain full control of the affected device. Affects multiple products in the ...
CVE-2023-46143
CVE-2023-46143 affects PHOENIX CONTACT classic line PLCs. The vulnerability stems from inadequate integrity checks when downloading code, allowing an unauthenticated remote attacker to modify some or all PLC applications. Exploitation status is not detailed in the provided sources. Related docume...