CVE-2023-3935

CVE-2023-3935 describes a heap buffer overflow in the CodeMeter Runtime network service (Wibu Systems) up to version 7.60b, enabling an unauthenticated, remote attacker to achieve remote code execution and gain full host access. Connected sources confirm the vulnerability is tied to CodeMeter Run...

CVE-2023-46144

CVE-2023-46144 affects Phoenix Contact PLCnext Engineer and PLCnext Control devices. Description: a download of code without integrity check allows a remote attacker with low privileges to compromise the integrity of the affected engineering station and connected devices. Root cause: missing inte...

CVE-2023-46142

CVE-2023-46142 concerns Phoenix Contact PLCnext Control devices. The issue is an incorrect permission assignment for critical resources that could let a remote attacker with low privileges gain full control of the affected devices. Public sources in the provided documents consistently identify PL...

CVE-2020-12499

CVE-2020-12499 affects PHOENIX CONTACT PLCnext Engineer up to version 2020.3.1 and earlier. The vulnerability stems from improper path sanitation during import of project files, resulting in a path traversal issue that could allow access to locations outside restricted directories. Public sources...