7.8
Élevée
CVE-2022-3737 In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 memory can be read beyond the intended scope due…
Description
In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 memory can be read beyond the intended scope due to insufficient validation of input data. Availability, integrity, or confidentiality of an application programming workstation might be compromised by attacks using these vulnerabilities.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Config+ 1.89 | premières → 1.89 | Pas de correctif indiqué |
| PC Worx 1.89 | premières → 1.89 | Pas de correctif indiqué |
| PC Worx Express 1.89 | premières → 1.89 | Pas de correctif indiqué |
Autres CVE de Config+
Les 4 CVE de Config+ →
CVE-2023-46143
Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT classic line PLCs allows an unauthenticated…
7.5
Élevée
CVE-2023-46141
Incorrect Permission Assignment for Critical Resource vulnerability in multiple products of the PHOENIX CONTACT…
9.8
Critique
CVE-2022-3461
In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 manipulated PC Worx or Config+ files could lead to a…
7.8
Élevée