phoenixcontact Vulnerability Advisory Catalog

Total 143 security vulnerabilities recorded for phoenixcontact software and firmware.

← Back to All Vendors
Component: fl_switch_smcs_16tx_firmware

In Phoenix Contact FL SWITCH SMCS series products in multiple versions if an attacker sends a hand-crafted TCP-Packet with the Urgent-Flag set and the...

📅 2021-06-25
CVSS 7.5 Dossier →
Component: fl_switch_smcs_16tx_firmware

In Phoenix Contact FL SWITCH SMCS series products in multiple versions an attacker may insert malicious code via LLDP frames into the web-based manage...

📅 2021-06-25
CVSS 7.4 Dossier →
Component: fl_switch_smcs_16tx_firmware

In Phoenix Contact FL SWITCH SMCS series products in multiple versions fragmented TCP-Packets may cause a Denial of Service of Web-, SNMP- and ICMP-Ec...

📅 2021-06-25
CVSS 5.3 Dossier →
Component: fl_comserver_uni_232\/422\/485_firmware

In Phoenix Contact FL COMSERVER UNI in versions < 2.40 a invalid Modbus exception response can lead to a temporary denial of service....

📅 2021-06-25
CVSS 7.5 Dossier →
Component: tc_mguard_rs4000_4g_vzw_vpn_firmware

On Phoenix Contact mGuard Devices versions before 8.8.3 LAN ports get functional after reboot even if they are disabled in the device configuration. F...

📅 2020-12-17
CVSS 5.4 Dossier →
Component: plcnext_firmware

On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS a specially crafted LLDP packet may lead to a high system load in the PROFINET s...

📅 2020-12-17
CVSS 6.5 Dossier →
Component: plcnext_firmware

On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an attacker can use this vulnerability i.e. to open a reverse shell with root pr...

📅 2020-12-17
CVSS 8.8 Dossier →
Component: plcnext_firmware

On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an attacker can use the knowledge gained by reading the insufficiently protected...

📅 2020-12-17
CVSS 5.5 Dossier →
Component: plcnext_firmware

On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an authenticated low privileged user could embed malicious Javascript code to ga...

📅 2020-12-17
CVSS 8.8 Dossier →
Component: btp_2043w_firmware

Uncontrolled Resource Consumption can be exploited to cause the Phoenix Contact HMIs BTP 2043W, BTP 2070W and BTP 2102W in all versions to become unre...

📅 2020-12-02
CVSS 7.5 Dossier →
Component: plcnext_engineer

In PHOENIX CONTACT PLCnext Engineer version 2020.3.1 and earlier an improper path sanitation vulnerability exists on import of project files....

📅 2020-07-21
CVSS 8.2 Dossier →
Component: pc_worx

mwe file parsing in Phoenix Contact PC Worx and PC Worx Express version 1.87 and earlier is vulnerable to out-of-bounds read remote code execution. Ma...

📅 2020-07-01
CVSS 7.8 Dossier →
Component: pc_worx

PLCopen XML file parsing in Phoenix Contact PC Worx and PC Worx Express version 1.87 and earlier can lead to a stack-based overflow. Manipulated PC Wo...

📅 2020-07-01
CVSS 7.8 Dossier →
Component: portico_server_1_client

Local Privilege Escalation can occur in PHOENIX CONTACT PORTICO SERVER through 3.0.7 when installed to run as a service....

📅 2020-03-27
CVSS 7.8 Dossier →
Component: pc_worx_srt

Insecure, default path permissions in PHOENIX CONTACT PC WORX SRT through 1.14 allow for local privilege escalation....

📅 2020-03-27
CVSS 7.8 Dossier →
Component: tc_router_3002t-4g_firmware

PHOENIX CONTACT TC ROUTER 3002T-4G through 2.05.3, TC ROUTER 2002T-3G through 2.05.3, TC ROUTER 3002T-4G VZW through 2.05.3, TC ROUTER 3002T-4G ATT th...

📅 2020-03-12
CVSS 8.8 Dossier →
Component: tc_router_3002t-4g_firmware

PHOENIX CONTACT TC ROUTER 3002T-4G through 2.05.3, TC ROUTER 2002T-3G through 2.05.3, TC ROUTER 3002T-4G VZW through 2.05.3, TC ROUTER 3002T-4G ATT th...

📅 2020-03-12
CVSS 7.5 Dossier →
Component: axl_f_bk_pn_firmware

An issue was discovered on PHOENIX CONTACT AXL F BK PN <=1.0.4, AXL F BK ETH <= 1.12, and AXL F BK ETH XC <= 1.11 devices and Bosch Rexroth S20-ETH-BK...

📅 2020-02-18
CVSS 7.5 Dossier →
Component: fl_nat_2208_firmware

Improper access control exists on PHOENIX CONTACT FL NAT 2208 devices before V2.90 and FL NAT 2304-2GC-2SFP devices before V2.90 when using MAC-based ...

📅 2020-02-18
CVSS 8.2 Dossier →
CVE-2020-8768 CRITICAL
Component: ilc_2050_bi_firmware

An issue was discovered on Phoenix Contact Emalytics Controller ILC 2050 BI before 1.2.3 and BI-L before 1.2.3 devices. There is an insecure mechanism...

📅 2020-02-17
CVSS 9.4 Dossier →
Component: config\+

An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86. A manipulated PC Worx or Conf...

📅 2019-10-31
CVSS 7.8 Dossier →
Component: automationworx_software_suite

An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86. A manipulated PC Worx or Conf...

📅 2019-06-24
CVSS 8.8 Dossier →
Component: automationworx_software_suite

An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86. A manipulated PC Worx or Conf...

📅 2019-06-24
CVSS 8.8 Dossier →
Component: automationworx_software_suite

An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86. A manipulated PC Worx or Conf...

📅 2019-06-24
CVSS 8.8 Dossier →
Page 5 of 6 (143 Total Records)