Vulnerability · Published Jul 1, 2020 · Assigned by CERTVDE
CVE-2020-12498Phoenix Contact Automation Worx <= 1.87: out-of-bounds read remote code execution
High 7.8
In plain English
A high-severity stack buffer overflow in Automation Worx from Phoenix Contact. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.1% (higher than 82% of all known vulnerabilities).
Severity (CVSS 3.1)7.8High
Exploit odds (30 days)2.1%top 18.2% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
mwe file parsing in Phoenix Contact PC Worx and PC Worx Express version 1.87 and earlier is vulnerable to out-of-bounds read remote code execution. Manipulated PC Worx projects could lead to a remote code execution due to insufficient input data validation.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Phoenix Contact | Automation Worx | unspecified – through 1.87 |
| Phoenix Contact | Automation Worx Express | unspecified – through 1.87 |
Weakness: CWE-121 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
References
- https://cert.vde.com/de-de/advisories/vde-2020-023 x_refsource_CONFIRM
- https://www.zerodayinitiative.com/advisories/ZDI-20-826/ x_refsource_MISC