Description
Improper Input Validation vulnerability in PC Worx Automation Suite of Phoenix Contact up to version 1.88 could allow an attacker with a manipulated project file to unpack arbitrary files outside of the selected project directory.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Phoenix Contact | PC Worx | PC Worx – ≤ 1.88, PC Worx-Express – ≤ 1.88 | — |
Advisories 1
- VDE-2021-052 PHOENIX CONTACT: PC Worx/-Express prone to improper input validation vulnerability CERT@VDE · May 22, 2025