Phoenix Contact vulnerabilities
193 CVEs and advisories name Phoenix Contact as an affected vendor, newest first. Follow it as a feed.
- CVE-2023-2673PHOENIX CONTACT: FL/TC MGUARD prone to Improper Input Validation
- CVE-2023-1109PHOENIX CONTACT: Directory Traversal Vulnerability in ENERGY AXC PU Web service
- CVE-2022-3461Buffer Overflow in PHOENIX CONTACT Automationworx Software Suite
- CVE-2022-3737Out-of-bounds Read in PHOENIX CONTACT Automationworx Software Suite
- CVE-2022-3480Denial-of-Service vulnerability in PHOENIX CONTACT mGuard product family
- CVE-2021-34579PHOENIX CONTACT: FL MGUARD DM version 1.12.0 and 1.13.0 Improper Privilege Management
- CVE-2022-31801Insufficient Verification of Data Vulnerability in ProConOS/ProConOS eCLR SDK and MULTIPROG Engineering tool
- CVE-2022-31800Insufficient Verification of Data Vulnerability in PHOENIX CONTACT classic line industrial controllers
- CVE-2022-29898Remote Code Execution in all versions of various RAD-ISM-900-EN-* devices by PHOENIX CONTACT
- CVE-2022-29897Remote Code Execution in all versions of various RAD-ISM-900-EN-* devices by PHOENIX CONTACT
- CVE-2021-34598Phoenix Contact: FL MGUARD lack of memory release in remote logging functionality
- CVE-2021-34582Phoenix Contact: FL MGUARD XSS through web-based management and REST API
- CVE-2021-34597Phoenix Contact: PC Worx/-Express prone to improper input validation vulnerability
- CVE-2021-34570Phoenix Contact: DoS for PLCnext Control devices in versions prior to 2021.0.5 LTS
- CVE-2021-34565In WirelessHART-Gateway versions 3.0.7 to 3.0.9 hard-coded credentials have been found
- CVE-2021-34564In WirelessHART-Gateway versions 3.0.9 a vulnerability allows to read and write sensitive data in a cookie
- CVE-2021-34563In WirelessHART-Gateway versions 3.0.8 and 3.0.9 the HttpOnly flag is missing in a cookie which allows client-side javascript to modify it
- CVE-2021-34562A vulnerability in WirelessHART-Gateway 3.0.8 it is possible to inject arbitrary JavaScript into the application's response
- CVE-2021-34561A vulnerability in WirelessHART-Gateway <= 3.0.8 allows to bypass any IP or firewall based access restrictions through DNS rebinding
- CVE-2021-34560A vulnerability in WirelessHART-Gateway <= 3.0.9 could lead to information exposure of sensitive information
- CVE-2021-34559A vulnerability in WirelessHART-Gateway <= 3.0.8 may allow remote attackers to rewrite links and URLs in cached pages to arbitrary strings
- CVE-2021-33555A vulnerability may allow remote attackers to read arbitrary files on the server of the WirelessHART-Gateway
- CVE-2021-33542Phoenix Contact: Automation Worx Software Suite affected by Remote Code Execution (RCE) vulnerability
- CVE-2021-33541Phoenix Contact: ILC1x Industrial controllers affected by Denial-of-Service vulnerability
- CVE-2021-33540Phoenix Contact: Undocumented FTP acces in certain AXL F BK and IL BK devices
- CVE-2021-21005Race Condition Vulnerability in Phoenix Contact FL SWITCH SMCS series products
- CVE-2021-21004Cross-site Scripting Vulnerability in Phoenix Contact FL SWITCH SMCS series products
- CVE-2021-21003Denial of Service Vulnerability in Phoenix Contact FL SWITCH SMCS series products
- CVE-2021-21002Denial of Service in Phoenix Contact FL COMSERVER UNI products
- CVE-2020-12523Phoenix Contact mGuard Devices versions before 8.8.3: LAN ports get functional after reboot even if they are disabled in the device configuration