Skip to content
OpenAdvisories
High · 8.2 CVE-2020-12499 EUVD-2020-4801GHSA-7wjc-2c4g-g553

PHOENIX CONTACT PLCnext Engineer version 2020.3.1 and earlier: Improper path sanitation vulnerability.

Published Jul 21, 2020 · Updated Sep 17, 2024 · Assigned by CERTVDE

Vendor: Phoenix Contact Product: PLCnext Engineer Category: ICS / OT

Description

In PHOENIX CONTACT PLCnext Engineer version 2020.3.1 and earlier an improper path sanitation vulnerability exists on import of project files.

Affected products

VendorProductAffectedFixed
PHOENIX CONTACT PLCnext Engineer unspecified – ≤ 2020.3.1 —

Advisories 2

References