Phoenix Contact vulnerabilities, page 5

190 vulnerabilities

Known vulnerabilities in Phoenix Contact products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 249 products.

7.8HighCVE-2022-3737phoenix contact · config+ +3 moreOut-of-bounds Read in PHOENIX CONTACT Automationworx Software SuiteIn PHOENIX CONTACT Automationworx Software Suite up to version 1.89 memory can be read beyond the intended scope due to insufficient validation of input data. Availability, integrity, or confidentiality of an application programming workstation might be compromised by attacks using these vulnerabilities.EPSS0.21%7.8HighCVE-2022-3461phoenix contact · config+ +3 moreBuffer Overflow in PHOENIX CONTACT Automationworx Software SuiteIn PHOENIX CONTACT Automationworx Software Suite up to version 1.89 manipulated PC Worx or Config+ files could lead to a heap buffer overflow and a read access violation. Availability, integrity, or confidentiality of an application programming workstation might be compromised by attacks using these vulnerabilities.EPSS0.21%8.8HighCVE-2024-11497phoenix contact · charx sec-3000 +3 morePhoenix Contact: CHARX-SEC3xxx Charge controllers vulnerable to privilege escalationAn authenticated attacker can use this vulnerability to perform a privilege escalation to gain root access.EPSS0.40%7.5HighCVE-2024-26000phoenix contact · charx sec-3000 +7 morePHOENIX CONTACT: Out of bounds read only memory accessAn unauthenticated remote attacker can read memory out of bounds due to improper input validation in the MQTT stack. The brute force attack is not always successful because of memory randomization.EPSS0.81%7.5HighCVE-2024-26003phoenix contact · charx sec-3000 +7 morePHOENIX CONTACT: DoS of the control agent in CHARX SeriesAn unauthenticated remote attacker can DoS the control agent due to a out-of-bounds read which may prevent or disrupt the charging functionality.EPSS1.16%7.5HighCVE-2024-26004phoenix contact · charx sec-3000 +7 morePHOENIX CONTACT: DoS of a control agent due to access of a uninitialized pointer in CHARX SeriesAn unauthenticated remote attacker can DoS a control agent due to access of a uninitialized pointer which may prevent or disrupt the charging functionality.EPSS1.00%7.8HighCVE-2024-26002phoenix contact · charx sec-3000 +7 morePHOENIX CONTACT: File ownership manipulation in CHARX SeriesAn improper input validation in the Qualcom plctool allows a local attacker with low privileges to gain root access by changing the ownership of specific files.EPSS0.26%4.8MediumCVE-2024-26005phoenix contact · charx sec-3000 +7 morePHOENIX CONTACT: Privilege gain through incomplete cleanup in CHARX SeriesAn unauthenticated remote attacker can gain service level privileges through an incomplete cleanup during service restart after a DoS.EPSS0.62%8.7HighCVE-2024-26288phoenix contact · charx sec-3000 +7 morePHOENIX CONTACT: Lack of SSL support in CHARX SeriesAn unauthenticated remote attacker can influence the communication due to the lack of encryption of sensitive data via a MITM. Charging is not affected.EPSS0.31%9.8CriticalCVE-2024-26001phoenix contact · charx sec-3000 +7 morePHOENIX CONTACT: Out of bounds write only memory accessAn unauthenticated remote attacker can write memory out of bounds due to improper input validation in the MQTT stack. The brute force attack is not always successful because of memory randomization.EPSS0.87%9.8CriticalCVE-2024-25996phoenix contact · charx sec-3000 +7 morePHOENIX CONTACT: Remote code execution due to an origin validation error in CHARX SeriesAn unauthenticated remote attacker can perform a remote code execution due to an origin validation error. The access is limited to the service user.EPSS0.39%7.3HighCVE-2024-25998phoenix contact · charx sec-3000 +7 morePHOENIX CONTACT: Command injection in the OCPP ServiceAn unauthenticated remote attacker can perform a command injection in the OCPP Service with limited privileges due to improper input validation.EPSS1.47%8.4HighCVE-2024-25999phoenix contact · charx sec-3000 +7 morePHOENIX CONTACT: Privilege escalation in the OCPP agent serviceAn unauthenticated local attacker can perform a privilege escalation due to improper input validation in the OCPP agent service.EPSS0.41%5.3MediumCVE-2024-25994phoenix contact · charx sec-3000 +7 morePHOENIX CONTACT: Unintended script file upload in CHARX SeriesAn unauthenticated remote attacker can upload a arbitrary script file due to improper input validation. The upload destination is fixed and is write only.EPSS0.73%5.3MediumCVE-2024-25997phoenix contact · charx sec-3000 +7 morePHOENIX CONTACT: Log injection in CHARX SeriesAn unauthenticated remote attacker can perform a log injection due to improper input validation. Only a certain log file is affected.EPSS0.69%9.8CriticalCVE-2024-25995phoenix contact · charx sec-3000 +7 morePHOENIX CONTACT: Remote code execution in CHARX SeriesAn unauthenticated remote attacker can modify configurations to perform a remote code execution, gain root rights or perform an DoS due to improper input validation.EPSS1.40%8.8HighCVE-2024-43385phoenix contact · fl mguard 2102 +71 morePhoenix Contact: OS command execution through PROXY_HTTP_PORT in mGuard devicesA low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralization of special elements in the variable PROXY_HTTP_PORT in mGuard devices.EPSS0.74%8.1HighCVE-2024-43391phoenix contact · fl mguard 2102 +71 morePhoenix Contact: Firewall reconfiguration through the FW_PORTFORWARDING.SRC_IP in MGUARD devicesA low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, packet forwarding, network access control or NAT through the FW_PORTFORWARDING.SRC_IP environment variable which can lead to a DoS.EPSS0.52%8.8HighCVE-2024-43386phoenix contact · fl mguard 2102 +71 morePhoenix Contact: OS command execution through EMAIL_NOTIFICATION.TO in mGuard devices.A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralization of special elements in the variable EMAIL_NOTIFICATION.TO in mGuard devices.EPSS0.74%8.1HighCVE-2024-43392phoenix contact · fl mguard 2102 +65 morePhoenix Contact: Firewall reconfiguration through the FW_environment variables in MGUARD devicesA low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, packet forwarding, network access control or NAT through the FW_INCOMING.FROM_IP FW_INCOMING.IN_IP FW_OUTGOING.FROM_IP FW_OUTGOING.IN_IP environment variable which can lead to a DoS.EPSS0.52%