Skip to content
OpenAdvisories
High ICSA-22-326-03 2 CVEs

Phoenix Contact Automation Worx

Published Nov 22, 2022 · Updated Nov 22, 2022

Vendor: Phoenix Contact Product: Automation Worx Config+ Product: Automation Worx PC Worx Product: Automation Worx PC Worx Express

Summary

Successful exploitation of these vulnerabilities could lead to a heap buffer overflow, release of unallocated memory, or a read access violation.

Vulnerabilities 2

  • High 7.8
    CVE-2022-3461

    Buffer Overflow in PHOENIX CONTACT Automationworx Software Suite

    In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 manipulated PC Worx or Config+ files could lead to a heap buffer overflow and a read access violation. Availability, integrity, or confidentiality of an application programming workstation mi…

    Phoenix Contact PC Worx PC Worx Express Config+ ICS / OT
  • High 7.8
    CVE-2022-3737

    Out-of-bounds Read in PHOENIX CONTACT Automationworx Software Suite

    In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 memory can be read beyond the intended scope due to insufficient validation of input data. Availability, integrity, or confidentiality of an application programming workstation might be compr…

    Phoenix Contact PC Worx PC Worx Express Config+ ICS / OT

Revision history

  1. #1

    Publication Date

References