CVE-2020-12497: Phoenixcontact Pc Worx

High severity, CVSS 7.8. EPSS: 14.7% chance of exploitation in the next 30 days.

PLCopen XML file parsing in Phoenix Contact PC Worx and PC Worx Express version 1.87 and earlier can lead to a stack-based overflow. Manipulated PC Worx projects could lead to a remote code execution due to insufficient input data validation.

Affected products

• Phoenixcontact Pc Worx: before 1.87 (fixed in 1.87)
• Phoenixcontact Pc Worx Express: up to and including 1.87

Published 2020-07-01. Last modified 2026-06-17.