CVE-2022-3737CWE-125

Out-of-bounds Read in PHOENIX CONTACT Automationworx Software Suite

High · published November 15, 2022

CVSS v3.1
7.8
EPSS
0%
Percentile
10.9
In the wild
Unconfirmed
What it is

In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 memory can be read beyond the intended scope due to insufficient validation of input data. Availability, integrity, or confidentiality of an application programming workstation might be compromised by attacks using these vulnerabilities.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00212 · 10.9th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2022-11-15T10:59Z
EPSS history
Timeline
  • 15 NOV 10:59Z
    Out-of-bounds Read in PHOENIX CONTACT Automationworx Software Suite
    cvelistv5