CVE-2023-46143
Published Dec 14, 2023Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT classic line PLCs allows an unauthenticated remote attacker to modify some or all applications on a PLC.
Vendor/product archive
phoenixcontact / automationworx_software_suite CVEs
Beta · best-effort7 CVEs tagged to phoenixcontact / automationworx_software_suite — 1 Critical, 6 High, 0 Medium, 0 Low, 0 Unrated.
CVE-2023-46141
Published Dec 14, 2023Incorrect Permission Assignment for Critical Resource vulnerability in multiple products of the PHOENIX CONTACT classic line allow an remote unauthenticated attacker to gain full…
CVE-2022-3737
Published Nov 15, 2022In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 memory can be read beyond the intended scope due to insufficient validation of input data. Availability, integr…
CVE-2022-3461
Published Nov 15, 2022In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 manipulated PC Worx or Config+ files could lead to a heap buffer overflow and a read access violation. Availabi…
CVE-2019-12870
Published Jun 24, 2019An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86. A manipulated PC Worx or Config+ project file could lead t…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2019-12869
Published Jun 24, 2019An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86. A manipulated PC Worx or Config+ project file could lead t…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2019-12871
Published Jun 24, 2019An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86. A manipulated PC Worx or Config+ project file could lead t…
- evidence mentions
- 1
- Buzz score
- 11.9
Showing 1-7 of 7 CVEsPage 1 of 1