CVE-2020-12497CWE-121

Phoenix Contact Automation Worx <= 1.87: stack-based overflow

High · published July 1, 2020

CVSS v3.1

7.8

EPSS

15%

Percentile

96.7

In the wild

Unconfirmed

What it is

PLCopen XML file parsing in Phoenix Contact PC Worx and PC Worx Express version 1.87 and earlier can lead to a stack-based overflow. Manipulated PC Worx projects could lead to a remote code execution due to insufficient input data validation.

The record

Technical detail

CVSS v3.1: 7.8 · HIGH
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0: Not supplied
EPSS: 0.14668 · 96.7th percentile
Weakness: CWE-121 · Stack-based Buffer Overflow
Published: 2020-07-01T15:52Z

EPSS history

Timeline

01 JUL 15:52Z
Phoenix Contact Automation Worx <= 1.87: stack-based overflow
cvelistv5