Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2022-3737

Out-of-bounds Read in PHOENIX CONTACT Automationworx Software Suite

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 memory can be read beyond the intended scope due to insufficient validation of input data. Availability, integrity, or confidentiality of an application programming workstation might be compromised by attacks using these vulnerabilities.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PHOENIX CONTACT Config+

Default version status: unaffected

  • 0 to ≤ 1.89affected

PHOENIX CONTACT PC Worx

Default version status: unaffected

  • 0 to ≤ 1.89affected

PHOENIX CONTACT PC Worx Express

Default version status: unaffected

  • 0 to ≤ 1.89affected

References