Skip to contentPhoenixcontact vulnerabilities
Products
Show 140 moreShow less
Newest
- phoenix contact fl comserver, phoenixcontact fl comserver uni 232\/422\/485-t firmware, fl comserver uni 232\/422\/485 firmware +2 moreDenial of Service in Phoenix Contact FL COMSERVER UNI productsCVE-2021-210027.5 High
- innominate mguard rs4000 4tx/3g/tx vpn, mguard rs4000 4tx/tx, mguard rs4000 4tx/tx vpn +15 more +17 morePhoenix Contact mGuard Devices versions before 8.8.3: LAN ports get functional after reboot even if they are disabled in the device configurationCVE-2020-125235.4 Medium
- phoenix contact axc f 1152 (1151412), axc f 2152 (2404267), axc f 2152 starterkit (1046568) +4 more +6 morePhoenix Contact PLCnext Control Devices versions before 2021.0 LTS: A specially crafted LLDP packet may lead to a high system load in the PROFINET stack.CVE-2020-125216.5 Medium
- phoenix contact axc f 1152 (1151412), axc f 2152 (2404267), axc f 2152 starterkit (1046568) +4 more +6 morePhoenix Contact PLCnext Control Devices versions before 2021.0 LTS: An attacker can use this vulnerability i.e. to open a reverse shell with root privileges.CVE-2020-125198.8 High
- phoenix contact axc f 1152 (1151412), axc f 2152 (2404267), axc f 2152 starterkit (1046568) +4 more +6 morePhoenix Contact PLCnext Control Devices versions before 2021.0 LTS: An attacker can use the knowledge gained by reading the insufficiently protected sensitive information to plan further attacks.CVE-2020-125185.5 Medium
- phoenix contact axc f 1152 (1151412), axc f 2152 (2404267), axc f 2152 starterkit (1046568) +4 more +6 morePhoenix Contact PLCnext Control Devices versions before 2021.0 LTS: An authenticated low privileged user could embed malicious Javascript code to gain admin rights when the admin user visits the vulne…CVE-2020-125178.8 High
- phoenix contact btp touch panel, phoenixcontact btp 2043w firmware, btp 2070w firmware +1 more +3 morePhoenix Contact BTP Touch Panels uncontrolled resource consumptionCVE-2020-125247.5 High
- phoenix contact plcnext engineerPHOENIX CONTACT PLCnext Engineer version 2020.3.1 and earlier: Improper path sanitation vulnerability.CVE-2020-124998.2 High
- phoenix contact automation worx, phoenixcontact pc worx, pc worx express +1 more +3 morePhoenix Contact Automation Worx <= 1.87: out-of-bounds read remote code executionCVE-2020-124987.8 High
- phoenix contact automation worx, phoenixcontact pc worx, pc worx express +1 more +3 morePhoenix Contact Automation Worx <= 1.87: stack-based overflowCVE-2020-12497EPSS 14.7%7.8 High
- phoenixcontact portico server 16 client, portico server 1 client, portico server 4 client +2 moreLocal Privilege Escalation can occur in PHOENIX CONTACT PORTICO SERVER through 3.0.7 when...CVE-2020-109407.8 High
- phoenixcontact pc worx srtInsecure, default path permissions in PHOENIX CONTACT PC WORX SRT through 1.14 allow for local...CVE-2020-109397.8 High
- phoenixcontact tc cloud client 1002-4g firmware, tc cloud client 1002-txtx firmware, tc router 2002t-3g firmware +3 more +5 morePHOENIX CONTACT TC ROUTER 3002T-4G through 2.05.3, TC ROUTER 2002T-3G through 2.05.3, TC ROUTER...CVE-2020-94357.5 High
- phoenixcontact tc cloud client 1002-4g firmware, tc cloud client 1002-txtx firmware, tc router 2002t-3g firmware +3 more +5 morePHOENIX CONTACT TC ROUTER 3002T-4G through 2.05.3, TC ROUTER 2002T-3G through 2.05.3, TC ROUTER...CVE-2020-94368.8 High
- phoenixcontact axl f bk eth firmware, axl f bk eth xc firmware, axl f bk pn firmware +2 moreAn issue was discovered on PHOENIX CONTACT AXL F BK PN <=1.0.4, AXL F BK ETH <= 1.12, and AXL F...CVE-2018-169947.5 High
- phoenixcontact fl nat 2208 firmware, fl nat 2304-2gc-2sfp firmware +1 moreImproper access control exists on PHOENIX CONTACT FL NAT 2208 devices before V2.90 and FL NAT...CVE-2019-183528.2 High
- phoenixcontact ilc 2050 bi-l firmware, ilc 2050 bi firmware +1 moreAn issue was discovered on Phoenix Contact Emalytics Controller ILC 2050 BI before 1.2.3 and BI-L...CVE-2020-87689.4 Critical
- phoenixcontact pc worx, pc worx express, config\+ +2 moreAn issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86,...CVE-2019-166757.8 High
- phoenixcontact automationworx software suiteAn issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86,...CVE-2019-128698.8 High
- phoenixcontact automationworx software suiteAn issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86,...CVE-2019-128708.8 High
- phoenixcontact automationworx software suiteAn issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86,...CVE-2019-128718.8 High
- phoenixcontact axc f 2152 firmware, axc f 2152 starterkit firmware +1 moreAn issue was discovered on Phoenix Contact AXC F 2152 (No.2404267) before 2019.0 LTS and AXC F...CVE-2019-109986.8 Medium
- phoenixcontact axc f 2152 firmware, axc f 2152 starterkit firmware +1 moreAn issue was discovered on Phoenix Contact AXC F 2152 (No.2404267) before 2019.0 LTS and AXC F...CVE-2019-109975.9 Medium
- phoenixcontact fl switch 3004t-fx firmware, fl switch 3004t-fx st firmware, fl switch 3005 firmware +26 more +28 moreThe WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 is vulnerable to a...CVE-2018-139947.5 High
- phoenixcontact fl switch 3004t-fx firmware, fl switch 3004t-fx st firmware, fl switch 3005 firmware +26 more +28 moreThe WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 is prone to CSRF.CVE-2018-139938.8 High
- phoenixcontact fl switch 3004t-fx firmware, fl switch 3004t-fx st firmware, fl switch 3005 firmware +26 more +28 moreThe WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 allows for plaintext...CVE-2018-139928.2 High
- phoenixcontact fl switch 3004t-fx firmware, fl switch 3004t-fx st firmware, fl switch 3005 firmware +26 more +28 moreThe WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 leaks private...CVE-2018-139915.3 Medium
- phoenixcontact fl switch 3004t-fx firmware, fl switch 3004t-fx st firmware, fl switch 3005 firmware +26 more +28 moreThe WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions prior to 1.35 is vulnerable to...CVE-2018-139908.6 High
- abb 1sap120600r0071 pm554-tp-eth, pm554-tp-eth firmware, abb, phoenix contact, schneider electric, siemens, and wago 2700974 ilc 151 eth +19 more +21 moreABB, Phoenix Contact, Schneider Electric, Siemens, WAGO - Programmable Logic Controllers,...CVE-2019-109537.5 High
- phoenixcontact rad-80211-xd\/hp-bus firmware, rad-80211-xd firmware +1 moreAn issue was discovered on PHOENIX CONTACT RAD-80211-XD and RAD-80211-XD/HP-BUS devices. Command...CVE-2019-97438.8 High
- phoenixcontact fl nat smcs 8tx firmware, fl nat smn 8tx-m-dmg firmware, fl nat smn 8tx-m firmware +1 more +3 moreAn issue was discovered on PHOENIX CONTACT FL NAT SMCS 8TX, FL NAT SMN 8TX, FL NAT SMN 8TX-M, and...CVE-2019-97448.8 High
- phoenixcontact axc 1050 firmware, ilc 131 eth\/xc firmware, ilc 131 eth firmware +5 more +7 morePhoenix Contact ILC 131 ETH, ILC 131 ETH/XC, ILC 151 ETH, ILC 151 ETH/XC, ILC 171 ETH 2TX, ILC...CVE-2019-92019.8 Critical
- phoenixcontact fl switch 3004t-fx firmware, fl switch 3004t-fx st firmware, fl switch 3005 firmware +26 more +28 moreAll Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1...CVE-2018-107319.0 Critical
- phoenixcontact fl switch 3004t-fx firmware, fl switch 3004t-fx st firmware, fl switch 3005 firmware +26 more +28 moreAll Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1...CVE-2018-107309.1 Critical
- phoenixcontact fl switch 3004t-fx firmware, fl switch 3004t-fx st firmware, fl switch 3005 firmware +26 more +28 moreAll Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1...CVE-2018-107295.3 Medium
- phoenixcontact fl switch 3004t-fx firmware, fl switch 3004t-fx st firmware, fl switch 3005 firmware +26 more +28 moreAll Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1...CVE-2018-107288.1 High
- phoenix contact ilc plcs, phoenixcontact ilc plcs firmware +1 moreThe web server in Phoenix Contact ILC PLCs allows access to read and write PLC variables without...CVE-2016-8380Public exploitEPSS 10.9%7.3 High
- phoenix contact ilc plcs, phoenixcontact ilc plcs firmware +1 moreThe web server in Phoenix Contact ILC PLCs can be accessed without authenticating even if the...CVE-2016-8371Public exploitEPSS 10.9%7.3 High
- phoenix contact ilc plcs, phoenixcontact ilc plcs firmware +1 moreWebvisit in Phoenix Contact ILC PLCs offers a password macro to protect HMI pages on the PLC...CVE-2016-8366Public exploit7.3 High
- phoenixcontact mguard centerport firmware, mguard core tx vpn firmware, mguard delta tx\/tx firmware +20 more +22 moreAn Improper Validation of Integrity Check Value issue was discovered in PHOENIX CONTACT mGuard...CVE-2018-54417.8 High
- phoenixcontact fl switch 3004t-fx firmware, fl switch 3004t-fx st firmware, fl switch 3005 firmware +26 more +28 moreAn Improper Authorization issue was discovered in PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, and 48xxx...CVE-2017-167439.8 Critical
- phoenixcontact fl switch 3004t-fx firmware, fl switch 3004t-fx st firmware, fl switch 3005 firmware +26 more +28 moreAn Information Exposure issue was discovered in PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, and 48xxx...CVE-2017-167415.3 Medium
- arm cortex-a12 firmware, cortex-a15 firmware, cortex-a17 firmware +306 more +308 moreCVE-2017-5753 does not affect BellSoft softwareCVE-2017-5753Public exploitFix availableEPSS 93.8%5.6 Medium
- phoenixcontact fl com server rs232 firmware, fl com server rs485 firmware, fl comserver bas 232 firmware +10 more +12 moreA Cross-site Scripting issue was discovered in PHOENIX CONTACT FL COMSERVER BASIC 232/422/485, FL...CVE-2017-167236.1 Medium
- oracle jrockit, oracle corporation java, debian linux +25 more +27 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2017-10198Fix available6.8 Medium
- oracle jrockit, oracle corporation java, debian linux +19 more +21 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2017-10176Fix available7.5 High
- oracle jrockit, oracle corporation java, debian linux +25 more +27 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2017-10135Fix available5.9 Medium
- oracle jrockit, oracle corporation java, debian linux +19 more +21 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2017-10118Fix available7.5 High
- oracle jrockit, oracle corporation java, debian linux +26 more +28 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2017-10116Fix available8.3 High
- oracle jrockit, oracle corporation java, debian linux +26 more +28 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2017-10115Fix available7.5 High
- Show moreLoading…