Vendor/product archive

phoenixcontact / plcnext_engineer CVEs

Beta · best-effort

4 CVEs tagged to phoenixcontact / plcnext_engineer — 1 Critical, 2 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to phoenixcontact vendor archive

CVE-2023-46144

Published Dec 14, 2023

A download of code without integrity check vulnerability in PLCnext products allows an remote attacker with low privileges to compromise integrity on the affected engineering stat…

CVSS 6.5 · Medium

Vendor/product tagsBeta · best-effort

CVE-2023-46142

Published Dec 14, 2023

A incorrect permission assignment for critical resource vulnerability in PLCnext products allows an remote attacker with low privileges to gain full access on the affected devices.

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

CVE-2023-3935

Published Sep 13, 2023

A heap buffer overflow vulnerability in Wibu CodeMeter Runtime network service up to version 7.60b allows an unauthenticated, remote attacker to achieve RCE and gain full access o…

CVSS 9.8 · Critical

evidence mentions: 1
Buzz score: 11.9

Vendor/product tagsBeta · best-effort

CVE-2020-12499

Published Jul 21, 2020

In PHOENIX CONTACT PLCnext Engineer version 2020.3.1 and earlier an improper path sanitation vulnerability exists on import of project files.

CVSS 8.2 · High

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1