ICSA-19-171-01

icsaUScisa_csaf_ot

PHOENIX CONTACT Automation Worx Software Suite

Advisory ansehen veröffentlicht 2019-06-20

Successful exploitation of these vulnerabilities could allow an attacker, with access to an original PC Worx or Config+ project file, to perform remote code execution.

01

beschreibt (3)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2019-12870UShigh8.8—
An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86. A manipulated PC Worx or Config+ project file could lead to…
CVE-2019-12869UShigh8.8—
An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86. A manipulated PC Worx or Config+ project file could lead to…
CVE-2019-12871UShigh8.8—
An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86. A manipulated PC Worx or Config+ project file could lead to…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (9)

  • MitigationConfig+ Automation Worx Software Suite

    Do not click web links or open unsolicited attachments in email messages.

  • MitigationConfig+ Automation Worx Software Suite

    Do not click web links or open unsolicited attachments in email messages.

  • MitigationConfig+ Automation Worx Software Suite

    Do not click web links or open unsolicited attachments in email messages.

  • MitigationPC Worx Automation Worx Software Suite

    Do not click web links or open unsolicited attachments in email messages.

  • MitigationPC Worx Automation Worx Software Suite

    Do not click web links or open unsolicited attachments in email messages.

  • MitigationPC Worx Automation Worx Software Suite

    Do not click web links or open unsolicited attachments in email messages.

  • MitigationPC Worx Express Automation Worx Software Suite

    Do not click web links or open unsolicited attachments in email messages.

  • MitigationPC Worx Express Automation Worx Software Suite

    Do not click web links or open unsolicited attachments in email messages.

  • MitigationPC Worx Express Automation Worx Software Suite

    Do not click web links or open unsolicited attachments in email messages.

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan