PHOENIX CONTACT: Security Advisory for Automation Worx Software Suite
Manipulated PC Worx or Config+ projects could lead to a remote code execution due to insufficient input data validation. The attacker needs to get access to an original PC Worx or Config+ project to be able to manipulate data inside the project folder. After manipulation the attacker needs to exchange the original files by the manipulated ones on the application programming workstation.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-16675US | high7.8 | — | ||
An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86. A manipulated PC Worx or Config+ project file could lead to… | ||||
references
External citations — patches, advisories, analysis.
- VDE-2019-016: PHOENIX CONTACT: Security Advisory for Automation Worx Software Suite - HTMLself
- CERT@VDE Security Advisories for Phoenix Contactexternal
- VDE-2019-016: PHOENIX CONTACT: Security Advisory for Automation Worx Software Suite - CSAFself
- Phoenix Contact Automationworx BCP File Parsing Memory Corruption Remote Code Execution Vulnerabilityexternal
- Phoenix Contact Automationworx MWT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerabilityexternal
remediations (2)
- Mitigation
We strongly recommend customers to exchange project files only using secure file exchange services. Project files should not be exchanged via unencrypted email.
- Fixed
With the next version of Automationworx Software Suite a sharpened validation of arrays regarding dimension and number of elements during input data conversion will be implemented. To improve the robustness against manipulated project files the input data validation will be extended. Further preventive security measures will be activated in the compiler settings.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan