Description
In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 manipulated PC Worx or Config+ files could lead to a heap buffer overflow and a read access violation. Availability, integrity, or confidentiality of an application programming workstation might be compromised by attacks using these vulnerabilities.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| PHOENIX CONTACT | Config+ | ≤ 1.89 | — |
| PHOENIX CONTACT | PC Worx | ≤ 1.89 | — |
| PHOENIX CONTACT | PC Worx Express | ≤ 1.89 | — |
Advisories 2
- VDE-2022-048 PHOENIX CONTACT: Automationworx BCP File Parsing Vulnerabilities CERT@VDE · May 14, 2025
- ICSA-22-326-03 Phoenix Contact Automation Worx CISA ICS & IT advisories · Nov 22, 2022