7.8
Élevée
CVE-2022-3461 In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 manipulated PC Worx or Config+ files could lead to a…
Description
In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 manipulated PC Worx or Config+ files could lead to a heap buffer overflow and a read access violation. Availability, integrity, or confidentiality of an application programming workstation might be compromised by attacks using these vulnerabilities.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Config+ 1.89 | premières → 1.89 | Pas de correctif indiqué |
| PC Worx 1.89 | premières → 1.89 | Pas de correctif indiqué |
| PC Worx Express 1.89 | premières → 1.89 | Pas de correctif indiqué |
Autres CVE de Config+
Les 4 CVE de Config+ →
CVE-2023-46143
Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT classic line PLCs allows an unauthenticated…
7.5
Élevée
CVE-2023-46141
Incorrect Permission Assignment for Critical Resource vulnerability in multiple products of the PHOENIX CONTACT…
9.8
Critique
CVE-2022-3737
In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 memory can be read beyond the intended scope due…
7.8
Élevée