Description
mwe file parsing in Phoenix Contact PC Worx and PC Worx Express version 1.87 and earlier is vulnerable to out-of-bounds read remote code execution. Manipulated PC Worx projects could lead to a remote code execution due to insufficient input data validation.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Phoenix Contact Automation Worx
unspecified to ≤ 1.87affected
Phoenix Contact Automation Worx Express
unspecified to ≤ 1.87affected