Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2022-3461

Buffer Overflow in PHOENIX CONTACT Automationworx Software Suite

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 manipulated PC Worx or Config+ files could lead to a heap buffer overflow and a read access violation. Availability, integrity, or confidentiality of an application programming workstation might be compromised by attacks using these vulnerabilities.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PHOENIX CONTACT Config+

Default version status: unaffected

  • 0 to ≤ 1.89affected

PHOENIX CONTACT PC Worx

Default version status: unaffected

  • 0 to ≤ 1.89affected

PHOENIX CONTACT PC Worx Express

Default version status: unaffected

  • 0 to ≤ 1.89affected

References