7.8
High
CVE-2022-3737 In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 memory can be read beyond the intended scope due…
Description
In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 memory can be read beyond the intended scope due to insufficient validation of input data. Availability, integrity, or confidentiality of an application programming workstation might be compromised by attacks using these vulnerabilities.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Config+ 1.89 | earliest → 1.89 | No fix stated |
| PC Worx 1.89 | earliest → 1.89 | No fix stated |
| PC Worx Express 1.89 | earliest → 1.89 | No fix stated |
Other CVEs of Config+
The 4 CVEs of Config+ →
CVE-2023-46143
Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT classic line PLCs allows an unauthenticated…
7.5
High
CVE-2023-46141
Incorrect Permission Assignment for Critical Resource vulnerability in multiple products of the PHOENIX CONTACT…
9.8
Critical
CVE-2022-3461
In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 manipulated PC Worx or Config+ files could lead to a…
7.8
High