PHOENIX CONTACT Automation Worx Software Suite

Risk Summary

Successful exploitation of these vulnerabilities could allow an attacker, with access to an original PC Worx or Config+ project file, to perform remote code execution.

CVEs (3)

Remediations

• Phoenix Contact is currently working on the next version of the Automation Worx Software Suite. This advisory will be updated with details of the new version when it becomes available.
• Phoenix Contact recommends users exchange project files using only secure file exchange services, and that project files should not be exchanged via unencrypted email.
• Do not click web links or open unsolicited attachments in email messages.
• Refer to Recognizing and Avoiding Email Scams for more information on avoiding email scams.
• Refer to Avoiding Social Engineering and Phishing Attacks for more information on social engineering attacks.

Affected Vendors

Affected Products (3)

Affected Sectors

Critical Manufacturing