7.8
High
CVE-2020-12498 mwe file parsing in Phoenix Contact PC Worx and PC Worx Express version 1.87 and earlier is vulnerable to…
Description
mwe file parsing in Phoenix Contact PC Worx and PC Worx Express version 1.87 and earlier is vulnerable to out-of-bounds read remote code execution. Manipulated PC Worx projects could lead to a remote code execution due to insufficient input data validation.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Automation Worx 1.87 | earliest → 1.87 | No fix stated |
| Automation Worx Express 1.87 | earliest → 1.87 | No fix stated |