CVE Feed

    Dashboard / CVE / CVE-2022-3461

    CVE-2022-3461

    In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 manipulated PC Worx or Config+ files could lead to a heap buffer overflow and a read access violation. Availability, integrity, or confidentiality of an application programming workstation might be compromised by attacks using these vulnerabilities.

    Published:Nov 15, 2022
    Last Modified:Apr 29, 2025
    EPS:Nov 15, 2022
    EPSS Score:0.00054
    CVSS Score:7.8

    Affected Products

    Vendor
    Phoenixcontact
    Product
    Automationworx Software Suite

    Exploits

    No exploit reference

    Related CVEs

    CVE-2023-46143 (CVSS 7.5) — Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT classic line PLCs allows an unauthen…
    CVE-2023-46141 (CVSS 9.8) — Incorrect Permission Assignment for Critical Resource vulnerability in multiple products of the PHOENIX CONTAC…
    CVE-2022-3737 (CVSS 7.8) — In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 memory can be read beyond the intended sco…
    CVE-2019-12869 (CVSS 8.8) — An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ thr…
    CVE-2019-12870 (CVSS 8.8) — An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ thr…
    CVE-2019-12871 (CVSS 8.8) — An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ thr…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High