Phoenixcontact

Config+

4 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2023-46143

  • EPSS 0.14%
  • Published 14.12.2023 14:15:43
  • Last modified 21.11.2024 08:27:58

Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT classic line PLCs allows an unauthenticated remote attacker to modify some or all applications on a PLC.

9.8

CVE-2023-46141

  • EPSS 0.81%
  • Published 14.12.2023 14:15:42
  • Last modified 21.11.2024 08:27:57

Incorrect Permission Assignment for Critical Resource vulnerability in multiple products of the PHOENIX CONTACT classic line allow an remote unauthenticated attacker to gain full access of the affected device.

7

CVE-2021-33542

  • EPSS 0.53%
  • Published 25.06.2021 19:15:09
  • Last modified 21.11.2024 06:09:03

Phoenix Contact Classic Automation Worx Software Suite in Version 1.87 and below is affected by a remote code execution vulnerability. Manipulated PC Worx or Config+ projects could lead to a remote code execution when unallocated memory is freed beca...

7.8

CVE-2019-16675

  • EPSS 7%
  • Published 31.10.2019 22:15:10
  • Last modified 21.11.2024 04:30:57

An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86. A manipulated PC Worx or Config+ project file could lead to an Out-of-bounds Read and remote code execution. The attacker needs t...