Phoenixcontact Automationworx Software Suite vulnerabilities

7 CVEs affecting Phoenixcontact Automationworx Software Suite, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-46143, published 2023-12-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-12869, published 2019-06-24. High severity, CVSS 8.8. EPSS: 3.8% chance of exploitation in the next 30 days. An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86. A manipulated PC Worx or Config+ project file could lead to an Out-Of-Bounds…
CVE-2019-12870, published 2019-06-24. High severity, CVSS 8.8. EPSS: 3.7% chance of exploitation in the next 30 days. An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86. A manipulated PC Worx or Config+ project file could lead to an Uninitialized…
CVE-2019-12871, published 2019-06-24. High severity, CVSS 8.8. EPSS: 3.7% chance of exploitation in the next 30 days. An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86. A manipulated PC Worx or Config+ project file could lead to a Use-After-Free…
CVE-2023-46141, published 2023-12-14. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. Incorrect Permission Assignment for Critical Resource vulnerability in multiple products of the PHOENIX CONTACT classic line allow an remote unauthenticated attacker to gain full access of the…
CVE-2023-46143, published 2023-12-14. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT classic line PLCs allows an unauthenticated remote attacker to modify some or all applications on a PLC.
CVE-2022-3461, published 2022-11-15. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 manipulated PC Worx or Config+ files could lead to a heap buffer overflow and a read access violation. Availability, integrity, or…
CVE-2022-3737, published 2022-11-15. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 memory can be read beyond the intended scope due to insufficient validation of input data. Availability, integrity, or…