Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2021-34597

Phoenix Contact: PC Worx/-Express prone to improper input validation vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

Improper Input Validation vulnerability in PC Worx Automation Suite of Phoenix Contact up to version 1.88 could allow an attacker with a manipulated project file to unpack arbitrary files outside of the selected project directory.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Phoenix Contact PC Worx

  • PC Worx to ≤ 1.88affected
  • PC Worx-Express to ≤ 1.88affected

References