7.8
Élevée
CVE-2020-12498 mwe file parsing in Phoenix Contact PC Worx and PC Worx Express version 1.87 and earlier is vulnerable to…
Description
mwe file parsing in Phoenix Contact PC Worx and PC Worx Express version 1.87 and earlier is vulnerable to out-of-bounds read remote code execution. Manipulated PC Worx projects could lead to a remote code execution due to insufficient input data validation.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Automation Worx 1.87 | premières → 1.87 | Pas de correctif indiqué |
| Automation Worx Express 1.87 | premières → 1.87 | Pas de correctif indiqué |