Phoenix Contact Automation Worx Software Suite

Risk Summary

Successful exploitation could allow an attacker to execute arbitrary code under the privileges of the application.

CVEs (2)

Remediations

• Phoenix Contact recommends users exchange project files only using secure file exchange services. Project files should not be exchanged via unencrypted email. In addition, we recommend exchanging or storing project files together with a checksum to ensure their integrity.
• With the next version of Automation Worx Software Suite, a sharpened input data validation, with respect to buffer size and description of size and number of objects referenced in a file, will be implemented.

Affected Vendors

Affected Products (2)

Affected Sectors

Communications, Critical Manufacturing, Information Technology