CVE-2020-12498CWE-121

Phoenix Contact Automation Worx <= 1.87: out-of-bounds read remote code execution

High · published July 1, 2020

CVSS v3.1
7.8
EPSS
2%
Percentile
81.6
In the wild
Unconfirmed
What it is

mwe file parsing in Phoenix Contact PC Worx and PC Worx Express version 1.87 and earlier is vulnerable to out-of-bounds read remote code execution. Manipulated PC Worx projects could lead to a remote code execution due to insufficient input data validation.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.02106 · 81.6th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2020-07-01T15:52Z
EPSS history
Timeline
  • 01 JUL 15:52Z
    Phoenix Contact Automation Worx <= 1.87: out-of-bounds read remote code execution
    cvelistv5