CVE-2020-12498: Phoenixcontact Pc Worx

High severity, CVSS 7.8. EPSS: 2.1% chance of exploitation in the next 30 days.

mwe file parsing in Phoenix Contact PC Worx and PC Worx Express version 1.87 and earlier is vulnerable to out-of-bounds read remote code execution. Manipulated PC Worx projects could lead to a remote code execution due to insufficient input data validation.

Affected products

• Phoenixcontact Pc Worx: before 1.87 (fixed in 1.87)
• Phoenixcontact Pc Worx Express: up to and including 1.87

Published 2020-07-01. Last modified 2026-06-17.