Total 143 security vulnerabilities recorded for phoenixcontact software and firmware.
An low privileged remote attacker can execute OS commands with root privileges due to improper neutralization of special elements in user data....
A low privileged remote attacker can get access to CSRF tokens of higher privileged users which can be abused to mount CSRF attacks....
A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, packet forwarding, network acces...
A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, packet forwarding, network acces...
A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, packet forwarding, network acces...
A low privileged remote attacker can perform configuration changes of the firewall services, including packet forwarding or NAT through the FW_NAT.IN_...
A low privileged remote attacker can perform configuration changes of the ospf service through OSPF_INTERFACE.SIMPLE_KEY, OSPF_INTERFACE.DIGEST_KEY en...
A low privileged remote attacker with write permissions can reconfigure the SNMP service due to improper input validation....
A low privileged remote attacker can read and write files as root due to improper neutralization of special elements in the variable EMAIL_RELAY_PASSW...
A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralization of special elements in the ...
A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralization of special elements in the ...
An unauthenticated remote attacker can exploit the behavior of the pathfinder TCP encapsulation service by establishing a high number of TCP connectio...
A remote unauthenticated attacker can use the firmware update feature on the LAN interface of the device to reset the password for the predefined, low...
An unauthenticated remote attacker can use this vulnerability to change the device configuration due to a file writeable for short time after system s...
A local attacker with low privileges can perform a privilege escalation with an init sc...
A local attacker with low privileges can use a command injection vulnerability to gain root privileges due to improper input validation using the OCPP...
A low privileged remote attacker can use a command injection vulnerability in the API which performs remote code execution as the user-app user due to...
An unauthenticated remote attacker can extract a session token with a MitM attack and g...
A local low privileged attacker can use an untrusted search path in a CHARX system utility to gain root privileges. ...
An unauthenticated remote attacker can influence the communication due to the lack of encryption of sensitive data via a MITM. Charging is not affecte...
An unauthenticated remote attacker can gain service level privileges through an incomplete cleanup during service restart after a DoS. ...
An unauthenticated remote attacker can DoS a control agent due to access of a uninitialized pointer which may prevent or disrupt the charging function...
An unauthenticated remote attacker can DoS the control agent due to a out-of-bounds read which may prevent or disrupt the charging functionality. ...
An improper input validation in the Qualcom plctool allows a local attacker with low privileges to gain root access by changing the ownership of speci...