PE
Product
Plcnext Engineer
4
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 1Low 0
Watch
Add Plcnext Engineer to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-3935 | 9.8 | Sep 13 | A heap buffer overflow vulnerability in Wibu CodeMeter Runtime network service up to version 7.60b allows an unauthenticated, remote attacker to achieve RCE and gain full access… Affected: through 2023.6 |
| CVE-2023-46142 | 8.8 | Dec 14 | A incorrect permission assignment for critical resource vulnerability in PLCnext products allows an remote attacker with low privileges to gain full access on the affected devices Affected: through 2024.0 |
| CVE-2020-12499 | 7.3 | Jul 21 | In PHOENIX CONTACT PLCnext Engineer version 2020.3.1 and earlier an improper path sanitation vulnerability exists on import of project files Affected: through 2020-3-1 |
| CVE-2023-46144 | 6.5 | Dec 14 | A download of code without integrity check vulnerability in PLCnext products allows an remote attacker with low privileges to compromise integrity on the affected engineering… Affected: through 2024.0 |
Showing 4
