8.2
High
CVE-2020-12499 In PHOENIX CONTACT PLCnext Engineer version 2020.3.1 and earlier an improper path sanitation vulnerability exists on…
Description
In PHOENIX CONTACT PLCnext Engineer version 2020.3.1 and earlier an improper path sanitation vulnerability exists on import of project files.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| PLCnext Engineer 2020.3 | earliest → 2020.3.1 | No fix stated |
Other CVEs of PLCnext Engineer
The 6 CVEs of PLCnext Engineer →
CVE-2026-110935
Path traversal in plug-in deployment
8.6
High
CVE-2026-110022
Signed plug-in validation bypass
8.6
High
CVE-2026-110021
Missing GSDX SignatureValue verification
6.9
Medium
CVE-2023-46144
A download of code without integrity check vulnerability in PLCnext products allows an remote attacker with low…
6.5
Medium