Description
PLCopen XML file parsing in Phoenix Contact PC Worx and PC Worx Express version 1.87 and earlier can lead to a stack-based overflow. Manipulated PC Worx projects could lead to a remote code execution due to insufficient input data validation.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Phoenix Contact Automation Worx
unspecified to ≤ 1.87affected
Phoenix Contact Automation Worx Express
unspecified to ≤ 1.87affected