7.8
Élevée
CVE-2020-12497 PLCopen XML file parsing in Phoenix Contact PC Worx and PC Worx Express version 1.87 and earlier can lead to a…
Description
PLCopen XML file parsing in Phoenix Contact PC Worx and PC Worx Express version 1.87 and earlier can lead to a stack-based overflow. Manipulated PC Worx projects could lead to a remote code execution due to insufficient input data validation.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Automation Worx 1.87 | premières → 1.87 | Pas de correctif indiqué |
| Automation Worx Express 1.87 | premières → 1.87 | Pas de correctif indiqué |