High ICSA-19-171-01 3 CVEs

PHOENIX CONTACT Automation Worx Software Suite

Published Jun 20, 2019 · Updated Jun 20, 2019

Vendor: Phoenix Contact Product: Config+ Automation Worx Software Suite Product: PC Worx Automation Worx Software Suite Product: PC Worx Express Automation Worx Software Suite

Summary

Successful exploitation of these vulnerabilities could allow an attacker, with access to an original PC Worx or Config+ project file, to perform remote code execution.

Vulnerabilities 3

Unscored —

CVE-2019-12869

An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86…

Jun 24, 2019
Unscored —

CVE-2019-12870

An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86…

Jun 24, 2019
Unscored —

CVE-2019-12871

An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86…

Jun 24, 2019

Revision history

2019-06-20 #1
ICSA-19-171-01 PHOENIX CONTACT Automation Worx Software Suite

References

ICS Advisory ICSA-19-171-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-19-171-01
Recommended Practices
https://www.us-cert.gov/ncas/tips/ST04-014
Recommended Practices
https://www.cisa.gov/news-events/ics-advisories/icsa-19-171-01
Recommended Practices
https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf