Phoenix Contact Automation Worx Express vulnerabilities

2 vulnerabilities

Known vulnerabilities in Phoenix Contact Automation Worx Express, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.8CVE-2020-12497phoenix contactautomation worx+3
EPSS score
14.67%
PLCopen XML file parsing in Phoenix Contact PC Worx and PC Worx Express version 1.87 and earlier can lead to a stack-based overflow. Manipulated PC Worx projects could lead to a remote code execution due to insufficient input data validation.7.8CVE-2020-12498phoenix contactautomation worx+3
EPSS score
2.11%
mwe file parsing in Phoenix Contact PC Worx and PC Worx Express version 1.87 and earlier is vulnerable to out-of-bounds read remote code execution. Manipulated PC Worx projects could lead to a remote code execution due to insufficient input data validation.