ICSA-19-171-01

icsaUScisa_csaf_ot

PHOENIX CONTACT Automation Worx Software Suite

view advisory published 2019-06-20

Successful exploitation of these vulnerabilities could allow an attacker, with access to an original PC Worx or Config+ project file, to perform remote code execution.

01

describes (3)

Related CVEs.

IDseverity exploitable
CVE-2019-12870UShigh8.8—
An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86. A manipulated PC Worx or Config+ project file could lead to…
CVE-2019-12869UShigh8.8—
An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86. A manipulated PC Worx or Config+ project file could lead to…
CVE-2019-12871UShigh8.8—
An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86. A manipulated PC Worx or Config+ project file could lead to…
02

references

External citations — patches, advisories, analysis.

03

remediations (9)

  • MitigationConfig+ Automation Worx Software Suite

    Do not click web links or open unsolicited attachments in email messages.

  • MitigationConfig+ Automation Worx Software Suite

    Do not click web links or open unsolicited attachments in email messages.

  • MitigationConfig+ Automation Worx Software Suite

    Do not click web links or open unsolicited attachments in email messages.

  • MitigationPC Worx Automation Worx Software Suite

    Do not click web links or open unsolicited attachments in email messages.

  • MitigationPC Worx Automation Worx Software Suite

    Do not click web links or open unsolicited attachments in email messages.

  • MitigationPC Worx Automation Worx Software Suite

    Do not click web links or open unsolicited attachments in email messages.

  • MitigationPC Worx Express Automation Worx Software Suite

    Do not click web links or open unsolicited attachments in email messages.

  • MitigationPC Worx Express Automation Worx Software Suite

    Do not click web links or open unsolicited attachments in email messages.

  • MitigationPC Worx Express Automation Worx Software Suite

    Do not click web links or open unsolicited attachments in email messages.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan