Login Request a demo
PW
Product
PC Worx Express
by Phoenixcontact · last CVE Dec 14, 2023
7
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 1High 6Medium 0Low 0
Severity
All severities7Critical1High6Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add PC Worx Express to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-46141
9.8
1%
Dec 14
Incorrect Permission Assignment for Critical Resource vulnerability in multiple products of the PHOENIX CONTACT classic line allow an remote unauthenticated attacker to gain full…
Affected: All versions, or not specified
CVE-2021-34597
7.8
1%
Nov 4
Improper Input Validation vulnerability in PC Worx Automation Suite of Phoenix Contact up to version 1.88 could allow an attacker with a manipulated project file to unpack…
Affected: through 1.88
CVE-2020-12498
7.8
2%
Jul 1
mwe file parsing in Phoenix Contact PC Worx and PC Worx Express version 1.87 and earlier is vulnerable to out-of-bounds read remote code execution
Affected: through 1.87
CVE-2020-12497
7.8
15%
Jul 1
PLCopen XML file parsing in Phoenix Contact PC Worx and PC Worx Express version 1.87 and earlier can lead to a stack-based overflow
Affected: through 1.87
CVE-2019-16675
7.8
3%
Oct 31
An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86
Affected: through 1.86
CVE-2023-46143
7.5
0%
Dec 14
Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT classic line PLCs allows an unauthenticated remote attacker to modify some or all applications on a PLC
Affected: All versions, or not specified
CVE-2021-33542
7.0
2%
Jun 25
Phoenix Contact Classic Automation Worx Software Suite in Version 1.87 and below is affected by a remote code execution vulnerability
Affected: through 1.87
Showing 7