CVE Feed

    Dashboard / CVE / CVE-2019-12870

    CVE-2019-12870

    An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86. A manipulated PC Worx or Config+ project file could lead to an Uninitialized Pointer and remote code execution. The attacker needs to get access to an original PC Worx or Config+ project file to be able to manipulate it. After manipulation, the attacker needs to exchange the original file with the manipulated one on the application programming workstation.

    Published:Jun 24, 2019
    Last Modified:Nov 21, 2024
    EPS:Jun 24, 2019
    EPSS Score:0.01728
    CVSS Score:8.8

    Affected Products

    Vendor
    Phoenixcontact
    Product
    Automationworx Software Suite

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-824 Access of Uninitialized Pointer

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2023-46143 (CVSS 7.5) — Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT classic line PLCs allows an unauthen…
    CVE-2023-46141 (CVSS 9.8) — Incorrect Permission Assignment for Critical Resource vulnerability in multiple products of the PHOENIX CONTAC…
    CVE-2022-3461 (CVSS 7.8) — In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 manipulated PC Worx or Config+ files could…
    CVE-2022-3737 (CVSS 7.8) — In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 memory can be read beyond the intended sco…
    CVE-2019-12869 (CVSS 8.8) — An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ thr…
    CVE-2019-12871 (CVSS 8.8) — An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ thr…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High