7.8
High
CVE-2020-12497 PLCopen XML file parsing in Phoenix Contact PC Worx and PC Worx Express version 1.87 and earlier can lead to a…
Description
PLCopen XML file parsing in Phoenix Contact PC Worx and PC Worx Express version 1.87 and earlier can lead to a stack-based overflow. Manipulated PC Worx projects could lead to a remote code execution due to insufficient input data validation.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Automation Worx 1.87 | earliest → 1.87 | No fix stated |
| Automation Worx Express 1.87 | earliest → 1.87 | No fix stated |