7.8
High
CVE-2022-3461 In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 manipulated PC Worx or Config+ files could lead to a…
Description
In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 manipulated PC Worx or Config+ files could lead to a heap buffer overflow and a read access violation. Availability, integrity, or confidentiality of an application programming workstation might be compromised by attacks using these vulnerabilities.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Config+ 1.89 | earliest → 1.89 | No fix stated |
| PC Worx 1.89 | earliest → 1.89 | No fix stated |
| PC Worx Express 1.89 | earliest → 1.89 | No fix stated |
Other CVEs of Config+
The 4 CVEs of Config+ →
CVE-2023-46143
Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT classic line PLCs allows an unauthenticated…
7.5
High
CVE-2023-46141
Incorrect Permission Assignment for Critical Resource vulnerability in multiple products of the PHOENIX CONTACT…
9.8
Critical
CVE-2022-3737
In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 memory can be read beyond the intended scope due…
7.8
High