Skip to contentPhoenix Contact vulnerabilities
Products
Show 133 moreShow less
Newest
- phoenix contact fl mguard 2102, fl mguard 4102 pci, fl mguard 4102 pcie +49 more +51 morePHOENIX CONTACT: FL/TC MGUARD prone to Improper Input ValidationCVE-2023-26735.3 Medium
- phoenixcontact energy axc pu, phoenix contact energy axc pu (1264327), infobox (1169323 ) +5 more +7 morePHOENIX CONTACT: Directory Traversal Vulnerability in ENERGY AXC PU Web serviceCVE-2023-11098.8 High
- phoenix contact config+, pc worx, phoenixcontact automationworx software suite +1 more +3 moreBuffer Overflow in PHOENIX CONTACT Automationworx Software SuiteCVE-2022-34617.8 High
- phoenixcontact automationworx software suite, phoenix contact config+, pc worx +1 more +3 moreOut-of-bounds Read in PHOENIX CONTACT Automationworx Software SuiteCVE-2022-37377.8 High
- phoenix contact fl mguard centerport, fl mguard centerport vpn-1000, fl mguard core tx +59 more +61 moreDenial-of-Service vulnerability in PHOENIX CONTACT mGuard product familyCVE-2022-34807.5 High
- phoenixcontact fl mguard dm, phoenix contact fl mguard dm (2981974) +1 morePHOENIX CONTACT: FL MGUARD DM version 1.12.0 and 1.13.0 Improper Privilege ManagementCVE-2021-345797.5 High
- phoenix contact multiprog, proconos, proconos eclr +2 moreInsufficient Verification of Data Vulnerability in ProConOS/ProConOS eCLR SDK and MULTIPROG Engineering toolCVE-2022-318019.8 Critical
- phoenix contact axc 1050, axc 1050 xc, axc 3050 +31 more +33 moreInsufficient Verification of Data Vulnerability in PHOENIX CONTACT classic line industrial controllersCVE-2022-318009.8 Critical
- phoenix contact rad-ism-900-en-bd, rad-ism-900-en-bd-bus, rad-ism-900-en-bd/b +3 more +5 moreRemote Code Execution in all versions of various RAD-ISM-900-EN-* devices by PHOENIX CONTACTCVE-2022-298989.1 Critical
- phoenix contact rad-ism-900-en-bd, rad-ism-900-en-bd-bus, rad-ism-900-en-bd/b +3 more +5 moreRemote Code Execution in all versions of various RAD-ISM-900-EN-* devices by PHOENIX CONTACTCVE-2022-298979.1 Critical
- phoenix contact fl mguard, phoenixcontact fl mguard 1102 firmware, fl mguard 1105 firmware +2 morePhoenix Contact: FL MGUARD lack of memory release in remote logging functionalityCVE-2021-345987.5 High
- phoenix contact fl mguard, phoenixcontact fl mguard 1102 firmware, fl mguard 1105 firmware +2 morePhoenix Contact: FL MGUARD XSS through web-based management and REST APICVE-2021-345824.8 Medium
- phoenix contact pc worx, phoenixcontact pc worx express +1 morePhoenix Contact: PC Worx/-Express prone to improper input validation vulnerabilityCVE-2021-345977.8 High
- phoenix contact plcnext, ietf rfc, phoenix contact axc f +6 more +8 morePhoenix Contact: DoS for PLCnext Control devices in versions prior to 2021.0.5 LTSCVE-2021-345707.5 High
- pepperl-fuchs wha-gw-f2d2-0-as-z2-eth.eip firmware, wha-gw-f2d2-0-as-z2-eth firmware, phoenix contact wha-gw-f2d2-0-as- z2-eth +1 more +3 moreIn WirelessHART-Gateway versions 3.0.7 to 3.0.9 hard-coded credentials have been foundCVE-2021-345659.8 Critical
- pepperl-fuchs wha-gw-f2d2-0-as- z2-eth.eip firmware, wha-gw-f2d2-0-as-z2-eth firmware, phoenix contact wha-gw-f2d2-0-as- z2-eth +1 more +3 moreIn WirelessHART-Gateway versions 3.0.9 a vulnerability allows to read and write sensitive data in a cookieCVE-2021-345645.5 Medium
- pepperl-fuchs wha-gw-f2d2-0-as-z2-eth.eip firmware, wha-gw-f2d2-0-as-z2-eth firmware, phoenix contact wha-gw-f2d2-0-as- z2-eth +1 more +3 moreIn WirelessHART-Gateway versions 3.0.8 and 3.0.9 the HttpOnly flag is missing in a cookie which allows client-side javascript to modify itCVE-2021-345633.3 Low
- pepperl-fuchs wha-gw-f2d2-0-as-z2-eth.eip firmware, wha-gw-f2d2-0-as-z2-eth firmware, phoenix contact wha-gw-f2d2-0-as- z2-eth +1 more +3 moreA vulnerability in WirelessHART-Gateway 3.0.8 it is possible to inject arbitrary JavaScript into the application's responseCVE-2021-345625.4 Medium
- pepperl-fuchs wha-gw-f2d2-0-as-z2-eth.eip firmware, wha-gw-f2d2-0-as-z2-eth firmware, phoenix contact wha-gw-f2d2-0-as- z2-eth +1 more +3 moreA vulnerability in WirelessHART-Gateway <= 3.0.8 allows to bypass any IP or firewall based access restrictions through DNS rebindingCVE-2021-345617.5 High
- pepperl-fuchs wha-gw-f2d2-0-as-z2-eth.eip firmware, wha-gw-f2d2-0-as-z2-eth firmware, phoenix contact wha-gw-f2d2-0-as- z2-eth +1 more +3 moreA vulnerability in WirelessHART-Gateway <= 3.0.9 could lead to information exposure of sensitive informationCVE-2021-345605.5 Medium
- pepperl-fuchs wha-gw-f2d2-0-as-z2-eth.eip firmware, wha-gw-f2d2-0-as-z2-eth firmware, phoenix contact wha-gw-f2d2-0-as- z2-eth +1 more +3 moreA vulnerability in WirelessHART-Gateway <= 3.0.8 may allow remote attackers to rewrite links and URLs in cached pages to arbitrary stringsCVE-2021-345595.4 Medium
- pepperl-fuchs wha-gw-f2d2-0-as- z2-eth.eip firmware, wha-gw-f2d2-0-as-z2-eth firmware, phoenix contact wha-gw-f2d2-0-as- z2-eth +1 more +3 moreA vulnerability may allow remote attackers to read arbitrary files on the server of the WirelessHART-GatewayCVE-2021-335557.5 High
- phoenix contact automation worx software suite, phoenixcontact pc worx, config\+ +1 more +3 morePhoenix Contact: Automation Worx Software Suite affected by Remote Code Execution (RCE) vulnerabilityCVE-2021-335427.8 High
- phoenix contact ilc1x, phoenixcontact ilc1x0 firmware, ilc1x1 firmware +2 morePhoenix Contact: ILC1x Industrial controllers affected by Denial-of-Service vulnerabilityCVE-2021-335417.5 High
- phoenix contact axl f bk, il, phoenixcontact axl f bk eip ef firmware +17 more +19 morePhoenix Contact: Undocumented FTP acces in certain AXL F BK and IL BK devicesCVE-2021-335407.3 High
- phoenix contact fl switch, fl nat, phoenixcontact fl nat smn 8tx-m firmware +14 more +16 moreRace Condition Vulnerability in Phoenix Contact FL SWITCH SMCS series productsCVE-2021-210057.5 High
- phoenix contact fl switch, fl nat, phoenixcontact fl nat smn 8tx-m firmware +14 more +16 moreCross-site Scripting Vulnerability in Phoenix Contact FL SWITCH SMCS series productsCVE-2021-210047.4 High
- phoenix contact fl switch, fl nat, phoenixcontact fl nat smn 8tx-m firmware +14 more +16 moreDenial of Service Vulnerability in Phoenix Contact FL SWITCH SMCS series productsCVE-2021-210035.3 Medium
- phoenix contact fl comserver, phoenixcontact fl comserver uni 232\/422\/485-t firmware, fl comserver uni 232\/422\/485 firmware +2 moreDenial of Service in Phoenix Contact FL COMSERVER UNI productsCVE-2021-210027.5 High
- innominate mguard rs4000 4tx/3g/tx vpn, mguard rs4000 4tx/tx, mguard rs4000 4tx/tx vpn +15 more +17 morePhoenix Contact mGuard Devices versions before 8.8.3: LAN ports get functional after reboot even if they are disabled in the device configurationCVE-2020-125235.4 Medium
- phoenix contact axc f 1152 (1151412), axc f 2152 (2404267), axc f 2152 starterkit (1046568) +4 more +6 morePhoenix Contact PLCnext Control Devices versions before 2021.0 LTS: A specially crafted LLDP packet may lead to a high system load in the PROFINET stack.CVE-2020-125216.5 Medium
- phoenix contact axc f 1152 (1151412), axc f 2152 (2404267), axc f 2152 starterkit (1046568) +4 more +6 morePhoenix Contact PLCnext Control Devices versions before 2021.0 LTS: An attacker can use this vulnerability i.e. to open a reverse shell with root privileges.CVE-2020-125198.8 High
- phoenix contact axc f 1152 (1151412), axc f 2152 (2404267), axc f 2152 starterkit (1046568) +4 more +6 morePhoenix Contact PLCnext Control Devices versions before 2021.0 LTS: An attacker can use the knowledge gained by reading the insufficiently protected sensitive information to plan further attacks.CVE-2020-125185.5 Medium
- phoenix contact axc f 1152 (1151412), axc f 2152 (2404267), axc f 2152 starterkit (1046568) +4 more +6 morePhoenix Contact PLCnext Control Devices versions before 2021.0 LTS: An authenticated low privileged user could embed malicious Javascript code to gain admin rights when the admin user visits the vulne…CVE-2020-125178.8 High
- phoenix contact btp touch panel, phoenixcontact btp 2043w firmware, btp 2070w firmware +1 more +3 morePhoenix Contact BTP Touch Panels uncontrolled resource consumptionCVE-2020-125247.5 High
- phoenix contact plcnext engineerPHOENIX CONTACT PLCnext Engineer version 2020.3.1 and earlier: Improper path sanitation vulnerability.CVE-2020-124998.2 High
- phoenix contact automation worx, phoenixcontact pc worx, pc worx express +1 more +3 morePhoenix Contact Automation Worx <= 1.87: out-of-bounds read remote code executionCVE-2020-124987.8 High
- phoenix contact automation worx, phoenixcontact pc worx, pc worx express +1 more +3 morePhoenix Contact Automation Worx <= 1.87: stack-based overflowCVE-2020-12497EPSS 14.7%7.8 High
- abb 1sap120600r0071 pm554-tp-eth, pm554-tp-eth firmware, abb, phoenix contact, schneider electric, siemens, and wago 2700974 ilc 151 eth +19 more +21 moreABB, Phoenix Contact, Schneider Electric, Siemens, WAGO - Programmable Logic Controllers,...CVE-2019-109537.5 High
- phoenix contact ilc plcs, phoenixcontact ilc plcs firmware +1 moreThe web server in Phoenix Contact ILC PLCs allows access to read and write PLC variables without...CVE-2016-8380Public exploitEPSS 10.9%7.3 High
- phoenix contact ilc plcs, phoenixcontact ilc plcs firmware +1 moreThe web server in Phoenix Contact ILC PLCs can be accessed without authenticating even if the...CVE-2016-8371Public exploitEPSS 10.9%7.3 High
- phoenix contact ilc plcs, phoenixcontact ilc plcs firmware +1 moreWebvisit in Phoenix Contact ILC PLCs offers a password macro to protect HMI pages on the PLC...CVE-2016-8366Public exploit7.3 High
- phoenix contact multiprog, proconos, phoenixcontact-software proconos eclr +2 morePhoenix Contact Software ProConOs and MultiProg Missing Authentication for Critical FunctionCVE-2014-9195Public exploitEPSS 81.1%10.0