Advisories · Technology

PHOENIX CONTACT PC Worx Express.

Every CVE that names PHOENIX CONTACT PC Worx Express among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-46143 CVE record

CVSS 7.5 High

Phoenix Contact: Classic line industrial controllers prone to inadequate integrity check of PLC
- PHOENIX CONTACT Automation Worx Software Suite
- PHOENIX CONTACT AXC 1050
- CWE-494
Not analysed yet 14 Dec 2023
CVE-2023-46141 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Phoenix Contact: Automation Worx and classic line controllers prone to Incorrect Permission Assignment for Critical Resource
- PHOENIX CONTACT Automation Worx Software Suite
- PHOENIX CONTACT AXC 1050
- Broken access control
Not analysed yet 14 Dec 2023
CVE-2022-3461 CVE record

CVSS 7.8 High

Buffer Overflow in PHOENIX CONTACT Automationworx Software Suite
- PHOENIX CONTACT Config+
- PHOENIX CONTACT PC Worx
- Memory corruption
Not analysed yet 15 Nov 2022
CVE-2022-3737 CVE record

CVSS 7.8 High

Out-of-bounds Read in PHOENIX CONTACT Automationworx Software Suite
- PHOENIX CONTACT Config+
- PHOENIX CONTACT PC Worx
- Memory corruption
Not analysed yet 15 Nov 2022