PHOENIX CONTACT PC WORX

Phoenix Contact: Automation Worx and classic line controllers prone to Incorrect Permission Assignment for Critical Resource

Phoenix Contact Automation Worx <= 1.87: stack-based overflow

An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86. A manipulated PC Worx or Config+ project file could lead to an Out-of-bounds Read and remote code execution. The attacker needs to get access to an original PC Worx or Config+ project to be able to manipulate data inside. After manipulation, the attacker needs to exchange the original files with the manipulated ones on the application programming workstation.

Phoenix Contact Automation Worx <= 1.87: out-of-bounds read remote code execution

Phoenix Contact: Automation Worx Software Suite affected by Remote Code Execution (RCE) vulnerability

Phoenix Contact: PC Worx/-Express prone to improper input validation vulnerability

Phoenix Contact: Classic line industrial controllers prone to inadequate integrity check of PLC