Vulnerability · Published Jul 1, 2020 · Assigned by CERTVDE
CVE-2020-12497Phoenix Contact Automation Worx <= 1.87: stack-based overflow
High 7.8
In plain English
A high-severity stack buffer overflow in Automation Worx from Phoenix Contact. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 14.7% (higher than 97% of all known vulnerabilities).
Severity (CVSS 3.1)7.8High
Exploit odds (30 days)14.7%top 3.3% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
PLCopen XML file parsing in Phoenix Contact PC Worx and PC Worx Express version 1.87 and earlier can lead to a stack-based overflow. Manipulated PC Worx projects could lead to a remote code execution due to insufficient input data validation.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Phoenix Contact | Automation Worx | unspecified – through 1.87 |
| Phoenix Contact | Automation Worx Express | unspecified – through 1.87 |
Weakness: CWE-121 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
References
- https://cert.vde.com/de-de/advisories/vde-2020-023 x_refsource_CONFIRM
- https://www.zerodayinitiative.com/advisories/ZDI-20-825/ x_refsource_MISC
- https://www.zerodayinitiative.com/advisories/ZDI-21-398/ x_refsource_MISC