# cve.now: Phoenix Contact

The newest entries naming Phoenix Contact as an affected vendor (up to 200), of 193 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-110935](https://cve.now/CVE-2026-110935.md): Path traversal in plug-in deployment (CVSS 8.6)
- [CVE-2026-110022](https://cve.now/CVE-2026-110022.md): Signed plug-in validation bypass (CVSS 8.6)
- [CVE-2026-110021](https://cve.now/CVE-2026-110021.md): Missing GSDX SignatureValue verification (CVSS 6.9)
- [CVE-2026-27565](https://cve.now/CVE-2026-27565.md): Remote code execution via uploading a malicious IODD file (CVSS 9.8)
- [CVE-2026-27564](https://cve.now/CVE-2026-27564.md): Command Injection via PUT in /api/datastorage/data (CVSS 7.2)
- [CVE-2026-27563](https://cve.now/CVE-2026-27563.md): Command Injection via GET in /api/datastorage/data (CVSS 7.2)
- [CVE-2026-27562](https://cve.now/CVE-2026-27562.md): Command Injection via PUT in /api/iodd/config (CVSS 7.2)
- [CVE-2026-27561](https://cve.now/CVE-2026-27561.md): Command Injection via GET in /api/iodd/config (CVSS 7.2)
- [CVE-2026-27560](https://cve.now/CVE-2026-27560.md): Command Injection via DELETE in /api/status/data (CVSS 7.2)
- [CVE-2026-27559](https://cve.now/CVE-2026-27559.md): Command Injection via GET in /api/status/data (CVSS 8.8)
- [CVE-2026-27558](https://cve.now/CVE-2026-27558.md): Command Injection in /index.php/attached\_devices\_tab/ajax\_remove\_uploaded\_iodd\_files (CVSS 8.8)
- [CVE-2026-27557](https://cve.now/CVE-2026-27557.md): Path Traversal in /index.php/view\_uploaded\_iodd\_file (CVSS 7.5)
- [CVE-2026-27556](https://cve.now/CVE-2026-27556.md): Local File Inclusion in /index.php/ajax/save\_iodd\_parameters (CVSS 8.8)
- [CVE-2026-27555](https://cve.now/CVE-2026-27555.md): Local File Inclusion in /index.php/ajax/get\_iodd\_port\_info (CVSS 8.8)
- [CVE-2026-27554](https://cve.now/CVE-2026-27554.md): Command Injection in /index.php/ajax/save\_iodd\_parameters (CVSS 8.8)
- [CVE-2026-27553](https://cve.now/CVE-2026-27553.md): Information Disclosure via Schema Path Manipulation (CVSS 6.5)
- [CVE-2026-27552](https://cve.now/CVE-2026-27552.md): Unauthorized IODD File Upload due to Improper Authorization (CVSS 8.1)
- [CVE-2026-27551](https://cve.now/CVE-2026-27551.md): Command Injection in /index.php/ajax/parameterManage (CVSS 8.8)
- [CVE-2026-27550](https://cve.now/CVE-2026-27550.md): Command Injection in Field\_Shadow\_Password Class (CVSS 8.8)
- [CVE-2026-27549](https://cve.now/CVE-2026-27549.md): Command Injection in /index.php/attached\_devices\_tab/do\_upload (CVSS 8.8)
- [CVE-2026-27548](https://cve.now/CVE-2026-27548.md): Command Injection in /index.php/ajax/get\_iodd\_port\_info (CVSS 8.8)
- [CVE-2026-27547](https://cve.now/CVE-2026-27547.md): Command Injection in /index.php/ajax/get\_iodd\_menu\_info (CVSS 8.8)
- [CVE-2026-27546](https://cve.now/CVE-2026-27546.md): Authentication Bypass in \_account\_log (CVSS 9.8)
- [CVE-2025-41771](https://cve.now/CVE-2025-41771.md): SQL injection (CVSS 5.3)
- [CVE-2025-41770](https://cve.now/CVE-2025-41770.md): Unauthenticated Denial of Service (CVSS 8.7)
- [CVE-2025-41769](https://cve.now/CVE-2025-41769.md): Unauthenticated Buffer Overflow in PROFINET Service (CVSS 9.3)
- [CVE-2026-7849](https://cve.now/CVE-2026-7849.md): Command Injection in SCM (idledisconnect parameter) (CVSS 9.3)
- [CVE-2026-44108](https://cve.now/CVE-2026-44108.md): Firewall bypass during shutdown (CVSS 9.3)
- [CVE-2026-44107](https://cve.now/CVE-2026-44107.md): Exposed Reboot via Modbus (CVSS 8.7)
- [CVE-2026-44105](https://cve.now/CVE-2026-44105.md): Cleartext password in logs (CVSS 5.8)
- [CVE-2026-44106](https://cve.now/CVE-2026-44106.md): Local Privilege Escalation vulnerability in /etc/init.d/user-applications via customer website file (CVSS 8.5)
- [CVE-2026-44104](https://cve.now/CVE-2026-44104.md): ControllerAgent does not perform validation of firmware (CVSS 9.3)
- [CVE-2026-44103](https://cve.now/CVE-2026-44103.md): JupiCore does not perform validation of firmware (CVSS 6.9)
- [CVE-2026-44102](https://cve.now/CVE-2026-44102.md): OCPP Firmware download is not properly locked (CVSS 6.9)
- [CVE-2026-44101](https://cve.now/CVE-2026-44101.md): OCPP reconfiguration vulnerability (CVSS 9.3)
- [CVE-2026-44100](https://cve.now/CVE-2026-44100.md): JupiCore charging point reconfiguration without auth (CVSS 8.8)
- [CVE-2026-44099](https://cve.now/CVE-2026-44099.md): Local Privilege Escalation via pppd password injection (CVSS 8.5)
- [CVE-2026-44098](https://cve.now/CVE-2026-44098.md): OS Command Injection in OCPP Agent via charge\_box\_id (CVSS 8.8)
- [CVE-2026-44097](https://cve.now/CVE-2026-44097.md): File Upload vulnerability (CVSS 5.3)
- [CVE-2026-44096](https://cve.now/CVE-2026-44096.md): udhcpc Privilege Escalation (CVSS 8.5)
- [CVE-2026-44095](https://cve.now/CVE-2026-44095.md): Local Privilege Escalation via Network scripts (CVSS 8.5)
- [CVE-2026-44094](https://cve.now/CVE-2026-44094.md): Fallback to second RAUC slot with default credentials (CVSS 8.3)
- [CVE-2026-44093](https://cve.now/CVE-2026-44093.md): Local Privilege Escalation vulnerability in /etc/init.d/user-applications via user-application start script (CVSS 8.5)
- [CVE-2026-44092](https://cve.now/CVE-2026-44092.md): Missing input validation / stripping of CRLF characters in SystemConfigManager (CVSS 8.8)
- [CVE-2026-44091](https://cve.now/CVE-2026-44091.md): Creation of a new configuration by posting a malicious ID to MQTT (CVSS 8.8)
- [CVE-2026-44090](https://cve.now/CVE-2026-44090.md): Missing authentication for MQTT Broker (CVSS 9.3)
- [CVE-2026-41032](https://cve.now/CVE-2026-41032.md): Phoenix Contact: Unauthenticated log download vulnerability in the firmware of CHARX SEC-3xxx charging controllers (CVSS 7.5)
- [CVE-2025-41669](https://cve.now/CVE-2025-41669.md): Insufficient Verification of Data Authenticity (CVSS 8.7)
- [CVE-2025-41670](https://cve.now/CVE-2025-41670.md): Untrusted Search Path (CVSS 8.7)
- [CVE-2024-43384](https://cve.now/CVE-2024-43384.md): Phoenix Contact: Improper removal of sensitive information in MGUARD products (CVSS 8.0)
- [CVE-2026-22323](https://cve.now/CVE-2026-22323.md): Cross‑Site Request Forgery in Link Aggregation Configuration (CVSS 7.1)
- [CVE-2026-22322](https://cve.now/CVE-2026-22322.md): Stored Cross‑Site Scripting in Link Aggregation Name Handling (CVSS 7.1)
- [CVE-2026-22321](https://cve.now/CVE-2026-22321.md): Stack-Based Buffer Overflow in CLI Login Username Handling over CLI (CVSS 5.3)
- [CVE-2026-22320](https://cve.now/CVE-2026-22320.md): Stack-Based Buffer Overflow in TFTP File-Transfer Command Handling over CLI (CVSS 6.5)
- [CVE-2026-22319](https://cve.now/CVE-2026-22319.md): Stack-Based Buffer Overflow in File Install Parameter Handling (CVSS 4.9)
- [CVE-2026-22318](https://cve.now/CVE-2026-22318.md): Stack-Based Buffer Overflow in File Transfer Parameter Handling (CVSS 4.9)
- [CVE-2026-22317](https://cve.now/CVE-2026-22317.md): Command Injection Vulnerability in Root CA Certificate Transfer Workflow (CVSS 7.2)
- [CVE-2026-22316](https://cve.now/CVE-2026-22316.md): Buffer Overflow using TFTP Filename (CVSS 6.5)
- [CVE-2025-41717](https://cve.now/CVE-2025-41717.md): Config-Upload Code Injection (CVSS 8.8)
- [CVE-2025-41693](https://cve.now/CVE-2025-41693.md): Authenticated Denial-of-Service via SSH (CVSS 4.3)
- [CVE-2025-41696](https://cve.now/CVE-2025-41696.md): Hardcoded User Password (CVSS 4.6)
- [CVE-2025-41694](https://cve.now/CVE-2025-41694.md): Authenticated Denial-of-Service via Webshell (CVSS 6.5)
- [CVE-2025-41692](https://cve.now/CVE-2025-41692.md): Weak/Predictable root Password (CVSS 6.8)
- [CVE-2025-41697](https://cve.now/CVE-2025-41697.md): Shell access to UART Console (CVSS 6.8)
- [CVE-2025-41695](https://cve.now/CVE-2025-41695.md): Reflected XSS vulnerability in dyn\_conn.php (CVSS 7.1)
- [CVE-2025-41745](https://cve.now/CVE-2025-41745.md): Reflected XSS vulnerability in pxc\_portCntr2.php (CVSS 7.1)
- [CVE-2025-41746](https://cve.now/CVE-2025-41746.md): Reflected XSS vulnerability in pxc\_portSecCfg.php (CVSS 7.1)
- [CVE-2025-41747](https://cve.now/CVE-2025-41747.md): Reflected XSS vulnerability in pxc\_vlanIntfCfg.php (CVSS 7.1)
- [CVE-2025-41748](https://cve.now/CVE-2025-41748.md): Reflected XSS vulnerability in pxc\_Dot1xCfg.php (CVSS 7.1)
- [CVE-2025-41749](https://cve.now/CVE-2025-41749.md): Reflected XSS vulnerability in port\_util.php (CVSS 7.1)
- [CVE-2025-41750](https://cve.now/CVE-2025-41750.md): Reflected XSS vulnerability in pxc\_PortCfg.php (CVSS 7.1)
- [CVE-2025-41751](https://cve.now/CVE-2025-41751.md): Reflected XSS vulnerability in pxc\_portCntr.php (CVSS 7.1)
- [CVE-2025-41752](https://cve.now/CVE-2025-41752.md): Reflected XSS vulnerability in pxc\_portSfp.php (CVSS 7.1)
- [CVE-2025-41699](https://cve.now/CVE-2025-41699.md): Phoenix Contact: Security Advisory for CHARX SEC-3xxx charging controllers (CVSS 8.8)
- [CVE-2025-41707](https://cve.now/CVE-2025-41707.md): Phoenix Contact: WebSocket Handler Denial of Service (CVSS 5.3)
- [CVE-2025-41706](https://cve.now/CVE-2025-41706.md): Phoenix Contact: Webserver Denial of Service through Malformed Content-Length (CVSS 5.3)
- [CVE-2025-41705](https://cve.now/CVE-2025-41705.md): Phoenix Contact: WebSocket Message Interception Leaks Webfrontend Credentials (CVSS 6.8)
- [CVE-2025-41704](https://cve.now/CVE-2025-41704.md): Phoenix Contact: Unauthenticated Modbus Service DoS via Crafted Function Code (CVSS 5.3)
- [CVE-2025-41703](https://cve.now/CVE-2025-41703.md): Phoenix Contact: UPS Shutdown via Unauthenticated Modbus Command (CVSS 7.5)
- [CVE-2025-41686](https://cve.now/CVE-2025-41686.md): Improper File Permissions Allow Local Privilege Escalation (CVSS 7.8)
- [CVE-2025-2813](https://cve.now/CVE-2025-2813.md): HTTP Service DoS Vulnerability (CVSS 7.5)
- [CVE-2025-41668](https://cve.now/CVE-2025-41668.md): Phoenix Contact: File access due to the replacement of a critical file used by the service security-profile (CVSS 8.8)
- [CVE-2025-41667](https://cve.now/CVE-2025-41667.md): Phoenix Contact: File access due to the replacement of a critical file used by the arp-preinit script (CVSS 8.8)
- [CVE-2025-41666](https://cve.now/CVE-2025-41666.md): Phoenix Contact: File access due to the replacement of a critical file used by the watchdog (CVSS 8.8)
- [CVE-2025-41665](https://cve.now/CVE-2025-41665.md): Phoenix Contact: DoS of the PLC due to incorrect default permissions possible (CVSS 6.5)
- [CVE-2025-25271](https://cve.now/CVE-2025-25271.md): OCPP Backend Configuration via Insecure Defaults (CVSS 8.8)
- [CVE-2025-25270](https://cve.now/CVE-2025-25270.md): Remote Code Execution via Unauthenticated Configuration Manipulation (CVSS 9.8)
- [CVE-2025-25269](https://cve.now/CVE-2025-25269.md): Local Privilege Escalation via Unauthenticated Command Injection (CVSS 8.4)
- [CVE-2025-25268](https://cve.now/CVE-2025-25268.md): Unauthenticated Configuration Access via Exposed API Endpoint (CVSS 8.8)
- [CVE-2025-24006](https://cve.now/CVE-2025-24006.md): Privilege Escalation via Insecure SSH Permissions (CVSS 7.8)
- [CVE-2025-24005](https://cve.now/CVE-2025-24005.md): Local Privilege Escalation via Vulnerable SSH Script (CVSS 7.8)
- [CVE-2025-24004](https://cve.now/CVE-2025-24004.md): USB-C Buffer Overflow via Display Interface in EV Charging Stations (CVSS 5.2)
- [CVE-2025-24003](https://cve.now/CVE-2025-24003.md): MQTT OOB Write Vulnerability in EichrechtAgents of German EV Charging Stations (CVSS 8.2)
- [CVE-2025-24002](https://cve.now/CVE-2025-24002.md): MQTT DoS Vulnerability in German EV Charging Stations (CVSS 5.3)
- [CVE-2018-25112](https://cve.now/CVE-2018-25112.md): PHOENIX CONTACT: ILC 1x1 ETH Denial of Service (CVSS 7.5)
- [CVE-2024-11497](https://cve.now/CVE-2024-11497.md): Phoenix Contact: CHARX-SEC3xxx Charge controllers vulnerable to privilege escalation (CVSS 8.8)
- [CVE-2024-43393](https://cve.now/CVE-2024-43393.md): Phoenix Contact: Configuration changes of the firewall services can lead to DoS in MGUARD devices (CVSS 8.1)
- [CVE-2024-43392](https://cve.now/CVE-2024-43392.md): Phoenix Contact: Firewall reconfiguration through the FW\_environment variables in MGUARD devices (CVSS 8.1)
- [CVE-2024-43391](https://cve.now/CVE-2024-43391.md): Phoenix Contact: Firewall reconfiguration through the FW\_PORTFORWARDING.SRC\_IP in MGUARD devices (CVSS 8.1)
- [CVE-2024-43390](https://cve.now/CVE-2024-43390.md): Phoenix Contact: Firewall reconfiguration due to improper input validation in MGUARD devices (CVSS 8.1)
- [CVE-2024-43389](https://cve.now/CVE-2024-43389.md): Phoenix Contact: OSPF reconfiguration due to improper input validation in MGUARD devices (CVSS 8.1)
- [CVE-2024-43388](https://cve.now/CVE-2024-43388.md): Phoenix Contact: SNMP reconfiguration due to improper input validation in MGUARD devices (CVSS 8.8)
- [CVE-2024-43387](https://cve.now/CVE-2024-43387.md): Phoenix Contact: Access files due to improper neutralization of special elements in MGUARD devices (CVSS 8.8)
- [CVE-2024-43386](https://cve.now/CVE-2024-43386.md): Phoenix Contact: OS command execution through EMAIL\_NOTIFICATION.TO in mGuard devices. (CVSS 8.8)
- [CVE-2024-43385](https://cve.now/CVE-2024-43385.md): Phoenix Contact: OS command execution through PROXY\_HTTP\_PORT in mGuard devices (CVSS 8.8)
- [CVE-2024-7699](https://cve.now/CVE-2024-7699.md): Phoenix Contact: OS command execution in MGUARD products (CVSS 8.8)
- [CVE-2024-7698](https://cve.now/CVE-2024-7698.md): Phoenix Contact: Access to CSRF tokens of higher privileged users in MGUARD products (CVSS 5.7)
- [CVE-2024-7734](https://cve.now/CVE-2024-7734.md): Phoenix Contact: Multiple mGuard devices are vulnerable to a drain of open file descriptors. (CVSS 5.3)
- [CVE-2024-6788](https://cve.now/CVE-2024-6788.md): Phoenix Contact: update feature from CHARX controller can be used to reset a low privilege user password (CVSS 8.6)
- [CVE-2024-3913](https://cve.now/CVE-2024-3913.md): Phoenix Contact: Start sequence allows attack during the boot process (CVSS 5.9)
- [CVE-2024-28137](https://cve.now/CVE-2024-28137.md): PHOENIX CONTACT: privilege escalation due to a TOCTOU vulnerability in the CHARX Series (CVSS 7.8)
- [CVE-2024-28136](https://cve.now/CVE-2024-28136.md): PHOENIX CONTACT: command injection gains root privileges using the OCPP remote service (CVSS 7.8)
- [CVE-2024-28135](https://cve.now/CVE-2024-28135.md): PHOENIX CONTACT: command injection vulnerability in the API of the CHARX Series (CVSS 5.0)
- [CVE-2024-28134](https://cve.now/CVE-2024-28134.md): PHOENIX CONTACT: MitM attack gains privileges of the current logged in user in CHARX Series (CVSS 7.0)
- [CVE-2024-28133](https://cve.now/CVE-2024-28133.md): PHOENIX CONTACT: Privilege escalation in CHARX Series (CVSS 7.8)
- [CVE-2024-26288](https://cve.now/CVE-2024-26288.md): PHOENIX CONTACT: Lack of SSL support in CHARX Series (CVSS 8.7)
- [CVE-2024-26005](https://cve.now/CVE-2024-26005.md): PHOENIX CONTACT: Privilege gain through incomplete cleanup in CHARX Series (CVSS 4.8)
- [CVE-2024-26004](https://cve.now/CVE-2024-26004.md): PHOENIX CONTACT: DoS of a control agent due to access of a uninitialized pointer in CHARX Series (CVSS 7.5)
- [CVE-2024-26003](https://cve.now/CVE-2024-26003.md): PHOENIX CONTACT: DoS of the control agent in CHARX Series (CVSS 7.5)
- [CVE-2024-26002](https://cve.now/CVE-2024-26002.md): PHOENIX CONTACT: File ownership manipulation in CHARX Series (CVSS 7.8)
- [CVE-2024-26001](https://cve.now/CVE-2024-26001.md): PHOENIX CONTACT: Out of bounds write only memory access (CVSS 7.4)
- [CVE-2024-26000](https://cve.now/CVE-2024-26000.md): PHOENIX CONTACT: Out of bounds read only memory access (CVSS 5.9)
- [CVE-2024-25999](https://cve.now/CVE-2024-25999.md): PHOENIX CONTACT: Privilege escalation in the OCPP agent service (CVSS 8.4)
- [CVE-2024-25998](https://cve.now/CVE-2024-25998.md): PHOENIX CONTACT: Command injection in the OCPP Service (CVSS 7.3)
- [CVE-2024-25997](https://cve.now/CVE-2024-25997.md): PHOENIX CONTACT: Log injection in CHARX Series (CVSS 5.3)
- [CVE-2024-25996](https://cve.now/CVE-2024-25996.md): PHOENIX CONTACT: Remote code execution due to an origin validation error in CHARX Series (CVSS 5.3)
- [CVE-2024-25995](https://cve.now/CVE-2024-25995.md): PHOENIX CONTACT: Remote code execution in CHARX Series (CVSS 9.8)
- [CVE-2024-25994](https://cve.now/CVE-2024-25994.md): PHOENIX CONTACT: Unintended script file upload in CHARX Series (CVSS 5.3)
- [CVE-2023-46144](https://cve.now/CVE-2023-46144.md): PHOENIX CONTACT: PLCnext Control prone to download of code without integrity check (CVSS 6.5)
- [CVE-2023-46143](https://cve.now/CVE-2023-46143.md): Phoenix Contact: Classic line industrial controllers prone to inadequate integrity check of PLC (CVSS 7.5)
- [CVE-2023-46142](https://cve.now/CVE-2023-46142.md): PHOENIX CONTACT: Insufficient Read and Write Protection to Logic and Runtime Data in PLCnext Control (CVSS 8.8)
- [CVE-2023-46141](https://cve.now/CVE-2023-46141.md): Phoenix Contact: Automation Worx and classic line controllers prone to Incorrect Permission Assignment for Critical Resource (CVSS 9.8)
- [CVE-2023-5592](https://cve.now/CVE-2023-5592.md): Phoenix Contact: ProConOs prone to Download of Code Without Integrity Check (CVSS 7.5)
- [CVE-2023-0757](https://cve.now/CVE-2023-0757.md): Phoenix Contact ProConOS prone to Incorrect Permission Assignment for Critical Resource (CVSS 9.8)
- [CVE-2023-37858](https://cve.now/CVE-2023-37858.md): PHOENIX CONTACT: Use of Hard-coded Credentials in WP 6xxx Web panels (CVSS 4.9)
- [CVE-2023-37857](https://cve.now/CVE-2023-37857.md): PHOENIX CONTACT: Use of Hard-coded Credentials in WP 6xxx Web panels (CVSS 3.8)
- [CVE-2023-37855](https://cve.now/CVE-2023-37855.md): PHOENIX CONTACT: Unauthorized read-access of root filesystem in WP 6xxx Web panels (CVSS 4.3)
- [CVE-2023-37856](https://cve.now/CVE-2023-37856.md): PHOENIX CONTACT: Unauthorized read-access of root filesystem in WP 6xxx Web panels (CVSS 4.3)
- [CVE-2023-37863](https://cve.now/CVE-2023-37863.md): PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels (CVSS 7.2)
- [CVE-2023-37859](https://cve.now/CVE-2023-37859.md): PHOENIX CONTACT: Improper Privilege Management in WP 6xxx Web panels (CVSS 7.2)
- [CVE-2023-37864](https://cve.now/CVE-2023-37864.md): PHOENIX CONTACT: WP 6xxx Web panels prone to download code without integrity check (CVSS 7.2)
- [CVE-2023-37862](https://cve.now/CVE-2023-37862.md): PHOENIX CONTACT: Missing Authorization in WP 6xxx Web panels (CVSS 8.2)
- [CVE-2023-37860](https://cve.now/CVE-2023-37860.md): PHOENIX CONTACT: Missing Authorization in WP 6xxx Web panels (CVSS 7.5)
- [CVE-2023-37861](https://cve.now/CVE-2023-37861.md): PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels (CVSS 8.8)
- [CVE-2023-3569](https://cve.now/CVE-2023-3569.md): PHOENIX CONTACT: Denial-of-Service due to malicious XML files in TC ROUTER, TC CLOUD CLIENT and CLOUD CLIENT (CVSS 4.9)
- [CVE-2023-3526](https://cve.now/CVE-2023-3526.md): PHOENIX CONTACT: Cross-site Scripting vulnerability in TC ROUTER, TC CLOUD CLIENT and CLOUD CLIENT devices (CVSS 9.6)
- [CVE-2023-3570](https://cve.now/CVE-2023-3570.md): PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels (CVSS 8.8)
- [CVE-2023-3572](https://cve.now/CVE-2023-3572.md): PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels (CVSS 10.0)
- [CVE-2023-3571](https://cve.now/CVE-2023-3571.md): PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels (CVSS 8.8)
- [CVE-2023-3573](https://cve.now/CVE-2023-3573.md): PHOENIX CONTACT: Command Injection in WP 6xxx Web panels (CVSS 8.8)
- [CVE-2023-2673](https://cve.now/CVE-2023-2673.md): PHOENIX CONTACT: FL/TC MGUARD prone to Improper Input Validation (CVSS 5.3)
- [CVE-2023-1109](https://cve.now/CVE-2023-1109.md): PHOENIX CONTACT: Directory Traversal Vulnerability in ENERGY AXC PU Web service (CVSS 8.8)
- [CVE-2022-3461](https://cve.now/CVE-2022-3461.md): Buffer Overflow in PHOENIX CONTACT Automationworx Software Suite (CVSS 7.8)
- [CVE-2022-3737](https://cve.now/CVE-2022-3737.md): Out-of-bounds Read in PHOENIX CONTACT Automationworx Software Suite (CVSS 7.8)
- [CVE-2022-3480](https://cve.now/CVE-2022-3480.md): Denial-of-Service vulnerability in PHOENIX CONTACT mGuard product family (CVSS 7.5)
- [CVE-2021-34579](https://cve.now/CVE-2021-34579.md): PHOENIX CONTACT: FL MGUARD DM version 1.12.0 and 1.13.0 Improper Privilege Management (CVSS 7.5)
- [CVE-2022-31801](https://cve.now/CVE-2022-31801.md): Insufficient Verification of Data Vulnerability in ProConOS/ProConOS eCLR SDK and MULTIPROG Engineering tool (CVSS 9.8)
- [CVE-2022-31800](https://cve.now/CVE-2022-31800.md): Insufficient Verification of Data Vulnerability in PHOENIX CONTACT classic line industrial controllers (CVSS 9.8)
- [CVE-2022-29898](https://cve.now/CVE-2022-29898.md): Remote Code Execution in all versions of various RAD-ISM-900-EN-\* devices by PHOENIX CONTACT (CVSS 9.1)
- [CVE-2022-29897](https://cve.now/CVE-2022-29897.md): Remote Code Execution in all versions of various RAD-ISM-900-EN-\* devices by PHOENIX CONTACT (CVSS 9.1)
- [CVE-2021-34598](https://cve.now/CVE-2021-34598.md): Phoenix Contact: FL MGUARD lack of memory release in remote logging functionality (CVSS 7.5)
- [CVE-2021-34582](https://cve.now/CVE-2021-34582.md): Phoenix Contact: FL MGUARD XSS through web-based management and REST API (CVSS 4.8)
- [CVE-2021-34597](https://cve.now/CVE-2021-34597.md): Phoenix Contact: PC Worx/-Express prone to improper input validation vulnerability (CVSS 7.8)
- [CVE-2021-34570](https://cve.now/CVE-2021-34570.md): Phoenix Contact: DoS for PLCnext Control devices in versions prior to 2021.0.5 LTS (CVSS 7.5)
- [CVE-2021-34565](https://cve.now/CVE-2021-34565.md): In WirelessHART-Gateway versions 3.0.7 to 3.0.9 hard-coded credentials have been found (CVSS 9.8)
- [CVE-2021-34564](https://cve.now/CVE-2021-34564.md): In WirelessHART-Gateway versions 3.0.9 a vulnerability allows to read and write sensitive data in a cookie (CVSS 5.5)
- [CVE-2021-34563](https://cve.now/CVE-2021-34563.md): In WirelessHART-Gateway versions 3.0.8 and 3.0.9 the HttpOnly flag is missing in a cookie which allows client-side javascript to modify it (CVSS 3.3)
- [CVE-2021-34562](https://cve.now/CVE-2021-34562.md): A vulnerability in WirelessHART-Gateway 3.0.8 it is possible to inject arbitrary JavaScript into the application's response (CVSS 5.4)
- [CVE-2021-34561](https://cve.now/CVE-2021-34561.md): A vulnerability in WirelessHART-Gateway \<= 3.0.8 allows to bypass any IP or firewall based access restrictions through DNS rebinding (CVSS 7.5)
- [CVE-2021-34560](https://cve.now/CVE-2021-34560.md): A vulnerability in WirelessHART-Gateway \<= 3.0.9 could lead to information exposure of sensitive information (CVSS 5.5)
- [CVE-2021-34559](https://cve.now/CVE-2021-34559.md): A vulnerability in WirelessHART-Gateway \<= 3.0.8 may allow remote attackers to rewrite links and URLs in cached pages to arbitrary strings (CVSS 5.4)
- [CVE-2021-33555](https://cve.now/CVE-2021-33555.md): A vulnerability may allow remote attackers to read arbitrary files on the server of the WirelessHART-Gateway (CVSS 7.5)
- [CVE-2021-33542](https://cve.now/CVE-2021-33542.md): Phoenix Contact: Automation Worx Software Suite affected by Remote Code Execution (RCE) vulnerability (CVSS 7.8)
- [CVE-2021-33541](https://cve.now/CVE-2021-33541.md): Phoenix Contact: ILC1x Industrial controllers affected by Denial-of-Service vulnerability (CVSS 7.5)
- [CVE-2021-33540](https://cve.now/CVE-2021-33540.md): Phoenix Contact: Undocumented FTP acces in certain AXL F BK and IL BK devices (CVSS 7.3)
- [CVE-2021-21005](https://cve.now/CVE-2021-21005.md): Race Condition Vulnerability in Phoenix Contact FL SWITCH SMCS series products (CVSS 7.5)
- [CVE-2021-21004](https://cve.now/CVE-2021-21004.md): Cross-site Scripting Vulnerability in Phoenix Contact FL SWITCH SMCS series products (CVSS 7.4)
- [CVE-2021-21003](https://cve.now/CVE-2021-21003.md): Denial of Service Vulnerability in Phoenix Contact FL SWITCH SMCS series products (CVSS 5.3)
- [CVE-2021-21002](https://cve.now/CVE-2021-21002.md): Denial of Service in Phoenix Contact FL COMSERVER UNI products (CVSS 7.5)
- [CVE-2020-12523](https://cve.now/CVE-2020-12523.md): Phoenix Contact mGuard Devices versions before 8.8.3: LAN ports get functional after reboot even if they are disabled in the device configuration (CVSS 5.4)
- [CVE-2020-12521](https://cve.now/CVE-2020-12521.md): Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS: A specially crafted LLDP packet may lead to a high system load in the PROFINET stack. (CVSS 6.5)
- [CVE-2020-12519](https://cve.now/CVE-2020-12519.md): Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS: An attacker can use this vulnerability i.e. to open a reverse shell with root privileges. (CVSS 8.8)
- [CVE-2020-12518](https://cve.now/CVE-2020-12518.md): Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS: An attacker can use the knowledge gained by reading the insufficiently protected sensitive information to plan further attacks. (CVSS 5.5)
- [CVE-2020-12517](https://cve.now/CVE-2020-12517.md): Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS: An authenticated low privileged user could embed malicious Javascript code to gain admin rights when the admin user visits the vulnerable website (local privilege escalation). (CVSS 8.8)
- [CVE-2020-12524](https://cve.now/CVE-2020-12524.md): Phoenix Contact BTP Touch Panels uncontrolled resource consumption (CVSS 7.5)
- [CVE-2020-12499](https://cve.now/CVE-2020-12499.md): PHOENIX CONTACT PLCnext Engineer version 2020.3.1 and earlier: Improper path sanitation vulnerability. (CVSS 8.2)
- [CVE-2020-12498](https://cve.now/CVE-2020-12498.md): Phoenix Contact Automation Worx \<= 1.87: out-of-bounds read remote code execution (CVSS 7.8)
- [CVE-2020-12497](https://cve.now/CVE-2020-12497.md): Phoenix Contact Automation Worx \<= 1.87: stack-based overflow (CVSS 7.8)
- [CVE-2019-10953](https://cve.now/CVE-2019-10953.md): ABB, Phoenix Contact, Schneider Electric, Siemens, WAGO - Programmable Logic Controllers, multiple versions. (CVSS 7.5)
- [CVE-2016-8380](https://cve.now/CVE-2016-8380.md): The web server in Phoenix Contact ILC PLCs allows access to read and write PLC variables without authentication. (no CVSS)
- [CVE-2016-8371](https://cve.now/CVE-2016-8371.md): The web server in Phoenix Contact ILC PLCs can be accessed without authenticating even if the authentication mechanism is enabled. (no CVSS)
- [CVE-2016-8366](https://cve.now/CVE-2016-8366.md): Webvisit in Phoenix Contact ILC PLCs offers a password macro to protect HMI pages on the PLC against casual or coincidental opening of HMI p (no CVSS)
- [CVE-2014-9195](https://cve.now/CVE-2014-9195.md): Phoenix Contact Software ProConOs and MultiProg Missing Authentication for Critical Function (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/phoenix-contact
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.