Skip to content
OpenAdvisories

Product · Phoenix Contact

Config+

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2023-46143

    Phoenix Contact: Classic line industrial controllers prone to inadequate integrity check of PLC

    Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT classic line PLCs allows an unauthenticated remote attacker to modify some or all applications on a PLC.

    Phoenix Contact PC Worx Config+ PC Worx Express ICS / OT
  • High 7.8
    CVE-2022-3461

    Buffer Overflow in PHOENIX CONTACT Automationworx Software Suite

    In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 manipulated PC Worx or Config+ files could lead to a heap buffer overflow and a read access violation. Availability, integrity, or confidentiality of an application programming workstation mi…

    Phoenix Contact PC Worx PC Worx Express Config+ ICS / OT
  • High 7.8
    CVE-2022-3737

    Out-of-bounds Read in PHOENIX CONTACT Automationworx Software Suite

    In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 memory can be read beyond the intended scope due to insufficient validation of input data. Availability, integrity, or confidentiality of an application programming workstation might be compr…

    Phoenix Contact PC Worx PC Worx Express Config+ ICS / OT