CVE-2021-34597: Phoenixcontact Pc Worx

High severity, CVSS 7.8. EPSS: 0.7% chance of exploitation in the next 30 days.

Improper Input Validation vulnerability in PC Worx Automation Suite of Phoenix Contact up to version 1.88 could allow an attacker with a manipulated project file to unpack arbitrary files outside of the selected project directory.

Affected products

• Phoenixcontact Pc Worx: up to and including 1.88
• Phoenixcontact Pc Worx Express: up to and including 1.88

Published 2021-11-04. Last modified 2026-06-17.