PHOENIX CONTACT

Products

ProductCVEsExploitedLatest
CHARX SEC-305051–Jul 30, 2026
CHARX SEC-315051–Jul 30, 2026
CHARX SEC-300051–Jul 30, 2026
CHARX SEC-310051–Jul 30, 2026
FL SWITCH 2206-2FX SM22–Mar 18, 2026
FL SWITCH 2206-2FX SM ST22–Mar 18, 2026
FL SWITCH 2516 PN22–Mar 18, 2026
FL SWITCH 251622–Mar 18, 2026
FL SWITCH 2514-2SFP PN22–Mar 18, 2026
FL SWITCH 2514-2SFP22–Mar 18, 2026
FL SWITCH 2512-2GC-2SFP22–Mar 18, 2026
FL SWITCH 2508 PN22–Mar 18, 2026
FL SWITCH 250822–Mar 18, 2026
FL SWITCH 2506-2SFP PN22–Mar 18, 2026
FL SWITCH 2506-2SFP22–Mar 18, 2026
FL SWITCH 2504-2GC-2SFP22–Mar 18, 2026
FL SWITCH 2416 PN22–Mar 18, 2026
FL SWITCH 241622–Mar 18, 2026
FL SWITCH 2414-2SFX PN22–Mar 18, 2026
FL SWITCH 2414-2SFX22–Mar 18, 2026
FL SWITCH 211622–Mar 18, 2026
FL SWITCH 2408 PN22–Mar 18, 2026
FL SWITCH 240822–Mar 18, 2026
FL SWITCH 2406-2SFX PN22–Mar 18, 2026
FL SWITCH 2406-2SFX22–Mar 18, 2026
FL SWITCH 2404-2TC-2SFX22–Mar 18, 2026
FL SWITCH 2316 PN22–Mar 18, 2026
FL SWITCH 231622–Mar 18, 2026
FL SWITCH 2314-2SFP PN22–Mar 18, 2026
FL SWITCH 2314-2SFP22–Mar 18, 2026
FL SWITCH 2312-2GC-2SFP22–Mar 18, 2026
FL SWITCH 2308 PN22–Mar 18, 2026
FL SWITCH 230822–Mar 18, 2026
FL SWITCH 2306-2SFP PN22–Mar 18, 2026
FL SWITCH 2306-2SFP22–Mar 18, 2026
FL SWITCH 2304-2GC-2SFP22–Mar 18, 2026
FL SWITCH 2216 PN22–Mar 18, 2026
FL SWITCH 221622–Mar 18, 2026
FL SWITCH 2214-2SFX PN22–Mar 18, 2026
FL SWITCH 2214-2SFX22–Mar 18, 2026
FL SWITCH 2214-2FX SM22–Mar 18, 2026
FL SWITCH 2214-2FX22–Mar 18, 2026
FL SWITCH 2212-2TC-2SFX22–Mar 18, 2026
FL SWITCH 2208C22–Mar 18, 2026
FL SWITCH 2412-2TC-2SFX22–Mar 18, 2026
FL SWITCH 2204-2TC-2SFX22–Mar 18, 2026
FL SWITCH 220522–Mar 18, 2026
FL SWITCH 2206-2FX22–Mar 18, 2026
FL SWITCH 2208 PN22–Mar 18, 2026
FL SWITCH 270822–Mar 18, 2026
FL SWITCH 2608 PN22–Mar 18, 2026
FL SWITCH 220822–Mar 18, 2026
FL SWITCH 2207-FX SM22–Mar 18, 2026
FL SWITCH 2207-FX22–Mar 18, 2026
FL SWITCH 260822–Mar 18, 2026
FL SWITCH 2206C-2FX22–Mar 18, 2026
FL SWITCH 2206-2SFX PN22–Mar 18, 2026
FL SWITCH 2206-2SFX22–Mar 18, 2026
FL SWITCH 2206-2FX ST22–Mar 18, 2026
FL SWITCH 200522–Mar 18, 2026
FL SWITCH 200822–Mar 18, 2026
FL SWITCH 201622–Mar 18, 2026
FL SWITCH 210522–Mar 18, 2026
FL SWITCH 210822–Mar 18, 2026
IOL MA8 EIP DI820–Sep 16, 2026
IOL MA8 PN DI820–Sep 16, 2026
FL MGUARD PCIE4000 VPN15–May 7, 2026
FL MGUARD RS2000 TX/TX-B15–May 7, 2026
FL MGUARD RS2000 TX/TX VPN15–May 7, 2026
FL MGUARD RS2005 TX VPN15–May 7, 2026
FL MGUARD SMART2 VPN15–May 7, 2026
FL MGUARD RS4000 TX/TX-M15–May 7, 2026
FL MGUARD RS4000 TX/TX-P15–May 7, 2026
FL MGUARD RS4000 TX/TX VPN15–May 7, 2026
FL MGUARD RS4004 TX/DTX15–May 7, 2026
FL MGUARD SMART215–May 7, 2026
FL MGUARD CENTERPORT VPN-100015–May 7, 2026
FL MGUARD CORE TX15–May 7, 2026
FL MGUARD CORE TX VPN15–May 7, 2026
FL MGUARD DELTA TX/TX15–May 7, 2026
FL MGUARD DELTA TX/TX VPN15–May 7, 2026
FL MGUARD RS4004 TX/DTX VPN15–May 7, 2026
FL MGUARD GT/GT15–May 7, 2026
FL MGUARD GT/GT VPN15–May 7, 2026
FL MGUARD PCI4000 VPN15–May 7, 2026
FL MGUARD PCI400015–May 7, 2026
FL MGUARD PCIE400015–May 7, 2026
WP 6215-WHPS14–Aug 9, 2023
FL MGUARD 210214–May 7, 2026
FL MGUARD 4102 PCI14–May 7, 2026
FL MGUARD 4102 PCIE14–May 7, 2026
FL MGUARD 430214–May 7, 2026
FL MGUARD RS4000 TX/TX14–May 7, 2026
TC MGUARD RS2000 3G VPN14–May 7, 2026
TC MGUARD RS2000 4G ATT VPN14–May 7, 2026
TC MGUARD RS2000 4G VPN14–May 7, 2026
TC MGUARD RS2000 4G VZW VPN14–May 7, 2026
TC MGUARD RS4000 3G VPN14–May 7, 2026
TC MGUARD RS4000 4G ATT VPN14–May 7, 2026
TC MGUARD RS4000 4G VPN14–May 7, 2026
TC MGUARD RS4000 4G VZW VPN14–May 7, 2026
WP 6070-WVPS14–Aug 9, 2023
WP 6101-WXPS14–Aug 9, 2023
WP 6121-WXPS14–Aug 9, 2023
WP 6156-WHPS14–Aug 9, 2023
WP 6185-WHPS14–Aug 9, 2023
FL MGUARD 210513–May 7, 2026
FL MGUARD 430513–May 7, 2026
BPC 9102S11–Aug 12, 2026
RFC 4072S11–Aug 12, 2026
AXC F 315211–Aug 12, 2026
AXC F 215211–Aug 12, 2026
AXC F 115211–Aug 12, 2026
WHA-GW-F2D2-0-AS- Z2-ETH.EIP8–Aug 31, 2021
WHA-GW-F2D2-0-AS- Z2-ETH8–Aug 31, 2021
EPC 15227–Aug 12, 2026
RFC 4072R7–Aug 12, 2026
PLCnext Engineer6–Nov 4, 2026
AXC F 12525–Aug 12, 2026
QUINT4-UPS/24DC/24DC/40/EIP5–Oct 14, 2025
EPC 15025–Aug 12, 2026
PC Worx5–Dec 14, 2023
VPLCNEXT CONTROL 20005–Aug 12, 2026
QUINT4-UPS/24DC/24DC/10/EIP5–Oct 14, 2025
VPLCNEXT CONTROL 30005–Aug 12, 2026
VPLCNEXT CONTROL 10005–Aug 12, 2026
VPLCNEXT CONTROL 5005–Aug 12, 2026
VL3 UPC 2440 EDGE5–Aug 12, 2026
QUINT4-UPS/24DC/24DC/5/EIP5–Oct 14, 2025
QUINT4-UPS/24DC/24DC/20/EIP5–Oct 14, 2025
RFC 4072S (10513284–Dec 17, 2020
AXC F 1152 (1151412)4–Dec 17, 2020
AXC F 2000 EA4–Aug 12, 2026
PLCnext Technology Starterkit (1188165)4–Dec 17, 2020
PC Worx Express4–Dec 14, 2023
AXC F 3152 (1069208)4–Dec 17, 2020
AXC F 2152 Starterkit (1046568)4–Dec 17, 2020
AXC F 2152 (2404267)4–Dec 17, 2020
Config+4–Dec 14, 2023
MULTIPROG3–Dec 14, 2023
RFC 430 ETH-IB3–Dec 14, 2023
RFC 450 ETH-IB3–Dec 14, 2023
RFC 460R PN 3TX3–Dec 14, 2023
AXC 30503–Dec 14, 2023
AXC 1050 XC3–Dec 14, 2023
RFC 470S PN 3TX3–Dec 14, 2023
RFC 480S PN 4TX3–Dec 14, 2023
AXC 10503–Dec 14, 2023
TC CLOUD CLIENT 1002-4G ATT3–Jan 13, 2026
BPC 9202S3–Aug 12, 2026
CLOUD CLIENT 1101T-TX/TX3–Jan 13, 2026
ILC 3xx3–Dec 14, 2023
TC ROUTER 3002T-4G3–Jan 13, 2026
TC ROUTER 3002T-4G ATT3–Jan 13, 2026
TC ROUTER 3002T-4G VZW3–Jan 13, 2026
FL SWITCH3–Jun 25, 2021
FL NAT3–Jun 25, 2021
Automation Worx Software Suite3–Dec 14, 2023
FC 350 PCI ETH3–Dec 14, 2023
PC WORX RT BASIC3–Dec 14, 2023
PC WORX SRT3–Dec 14, 2023
RAD-ISM-900-EN-BD-BUS2–May 11, 2022
Automation Worx Express2–Jul 1, 2020
FL MGUARD2–Nov 10, 2021
FL MGUARD CENTERPORT2–Jun 13, 2023
ILC1x12–Dec 14, 2023
ILC1x02–Dec 14, 2023
ProConOS eCLR (SDK)2–Dec 14, 2023
Automation Worx2–Jul 1, 2020
TC CLOUD CLIENT 1002-4G VZW2–Aug 8, 2023
TC CLOUD CLIENT 1002-4G2–Aug 8, 2023
Catan C12–Aug 12, 2026
RAD-ISM-900-EN-BD/B2–May 11, 2022
RAD-ISM-900-EN-BD2–May 11, 2022
ProConOS1–Jun 21, 2022
DaUM1–Aug 12, 2025
CHARX SEC-3150 (1139012)1–Aug 13, 2024
CHARX SEC-3100 (1139012)1–Aug 13, 2024
CHARX SEC-3050 (1139018)1–Aug 13, 2024
CHARX SEC-3000 (1139022)1–Aug 13, 2024
BTP Touch Panel1–Dec 2, 2020
AXL F BK SAS (discontinued)1–Jul 31, 2025
AXL F BK PN XC (discontinued)1–Jul 31, 2025
AXL F BK PN TPS XC1–Jul 31, 2025
AXL F BK PN TPS1–Jul 31, 2025
AXL F BK PN (discontinued)1–Jul 31, 2025
AXL F BK ETH XC1–Jul 31, 2025
AXL F BK ETH1–Jul 31, 2025
AXL F BK EIP XC1–Jul 31, 2025
AXL F BK EIP EF1–Jul 31, 2025
AXL F BK EIP1–Jul 31, 2025
AXL F BK1–Jun 25, 2021
AXC F1–Sep 27, 2021
IL1–Jun 25, 2021
IL EIP BK DI8 DO4 2TX-PAC1–Jul 31, 2025
IL ETH BK DI8 DO4 2TX-PAC1–Jul 31, 2025
IL ETH BK-PAC1–Jul 31, 2025
IL PN BK-PAC1–Jul 31, 2025
ILC 1x01–Jun 21, 2022
ILC 1x11–Jun 21, 2022

Exploited and recent CVEs

  • CVE-2026-110935 High 8.4 Path traversal in plug-in deployment 0.2%
  • CVE-2026-110022 High 8.4 Signed plug-in validation bypass 0.1%
  • CVE-2026-110021 Medium 6.2 Missing GSDX SignatureValue verification <0.1%
  • CVE-2026-27565 Critical 9.8 Remote code execution via uploading a malicious IODD file 1.0%
  • CVE-2026-27565 Critical 9.8 Remote code execution via uploading a malicious IODD file 1.0%
  • CVE-2026-27564 High 7.2 Command Injection via PUT in /api/datastorage/data 2.7%
  • CVE-2026-27564 High 7.2 Command Injection via PUT in /api/datastorage/data 2.7%
  • CVE-2026-27563 High 7.2 Command Injection via GET in /api/datastorage/data 2.7%
  • CVE-2026-27563 High 7.2 Command Injection via GET in /api/datastorage/data 2.7%
  • CVE-2026-27562 High 7.2 Command Injection via PUT in /api/iodd/config 2.7%
  • CVE-2026-27562 High 7.2 Command Injection via PUT in /api/iodd/config 2.7%
  • CVE-2026-27561 High 7.2 Command Injection via GET in /api/iodd/config 2.7%
  • CVE-2026-27561 High 7.2 Command Injection via GET in /api/iodd/config 2.7%
  • CVE-2026-27560 High 7.2 Command Injection via DELETE in /api/status/data 2.7%
  • CVE-2026-27560 High 7.2 Command Injection via DELETE in /api/status/data 2.7%
  • CVE-2026-27559 High 8.8 Command Injection via GET in /api/status/data 2.9%
  • CVE-2026-27559 High 8.8 Command Injection via GET in /api/status/data 2.9%
  • CVE-2026-27558 High 8.8 Command Injection in /index.php/attached_devices_tab/ajax_remove_uploaded_iodd_files 2.9%
  • CVE-2026-27558 High 8.8 Command Injection in /index.php/attached_devices_tab/ajax_remove_uploaded_iodd_files 2.9%
  • CVE-2026-27557 High 7.5 Path Traversal in /index.php/view_uploaded_iodd_file 0.7%
  • CVE-2026-27557 High 7.5 Path Traversal in /index.php/view_uploaded_iodd_file 0.7%
  • CVE-2026-27556 High 8.8 Local File Inclusion in /index.php/ajax/save_iodd_parameters 0.9%
  • CVE-2026-27556 High 8.8 Local File Inclusion in /index.php/ajax/save_iodd_parameters 0.9%
  • CVE-2026-27555 High 8.8 Local File Inclusion in /index.php/ajax/get_iodd_port_info 0.9%
  • CVE-2026-27555 High 8.8 Local File Inclusion in /index.php/ajax/get_iodd_port_info 0.9%
  • CVE-2026-27554 High 8.8 Command Injection in /index.php/ajax/save_iodd_parameters 2.9%
  • CVE-2026-27554 High 8.8 Command Injection in /index.php/ajax/save_iodd_parameters 2.9%
  • CVE-2026-27553 Medium 6.5 Information Disclosure via Schema Path Manipulation 0.6%
  • CVE-2026-27553 Medium 6.5 Information Disclosure via Schema Path Manipulation 0.6%
  • CVE-2026-27552 High 8.1 Unauthorized IODD File Upload due to Improper Authorization 0.6%