Phoenixcontact
Phoenixcontact PC Worx: vulnerabilidades y CVE
Phoenixcontact PC Worx tiene 7 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 1 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE7
Últimos 12 meses0
Críticas1
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2023-46143 | Alta (7.5) | 0.33% | — | 14 dic 2023 | Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT classic line PLCs allows an unauthenticated remote attacker to modify some or all applications on a PLC. |
| CVE-2023-46141 | Crítica (9.8) | 0.88% | — | 14 dic 2023 | Incorrect Permission Assignment for Critical Resource vulnerability in multiple products of the PHOENIX CONTACT classic line allow an remote unauthenticated attacker to gain full access of the affected device. |
| CVE-2021-34597 | Alta (7.8) | 0.65% | — | 4 nov 2021 | Improper Input Validation vulnerability in PC Worx Automation Suite of Phoenix Contact up to version 1.88 could allow an attacker with a manipulated project file to unpack arbitrary files outside of the selected project… |
| CVE-2021-33542 | Alta (7) | 1.8% | — | 25 jun 2021 | Phoenix Contact Classic Automation Worx Software Suite in Version 1.87 and below is affected by a remote code execution vulnerability. Manipulated PC Worx or Config+ projects could lead to a remote code execution when… |
| CVE-2020-12498 | Alta (7.8) | 2.1% | — | 1 jul 2020 | mwe file parsing in Phoenix Contact PC Worx and PC Worx Express version 1.87 and earlier is vulnerable to out-of-bounds read remote code execution. Manipulated PC Worx projects could lead to a remote code execution due… |
| CVE-2020-12497 | Alta (7.8) | 15% | — | 1 jul 2020 | PLCopen XML file parsing in Phoenix Contact PC Worx and PC Worx Express version 1.87 and earlier can lead to a stack-based overflow. Manipulated PC Worx projects could lead to a remote code execution due to insufficient… |
| CVE-2019-16675 | Alta (7.8) | 3.3% | — | 31 oct 2019 | An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86. A manipulated PC Worx or Config+ project file could lead to an Out-of-bounds Read and remote code… |
Otros productos de Phoenixcontact
Charx Sec-3100 Firmware · 29Charx Sec-3050 Firmware · 29Charx Sec-3000 Firmware · 29Charx Sec-3150 Firmware · 29FL Mguard Rs4004 Tx/dtx Firmware · 16FL Mguard Rs4004 Tx/dtx VPN Firmware · 16FL Mguard Core TX VPN Firmware · 15FL Mguard Gt/gt VPN Firmware · 15FL Mguard Delta Tx/tx Firmware · 15FL Mguard Delta Tx/tx VPN Firmware · 15FL Mguard Centerport Vpn-1000 Firmware · 15FL Mguard Core TX Firmware · 15