CVE-2022-3461
highPriorität · verfolgen · 0EPSS 0.002 · 12. PerzentilDEEUUSEPSS · bewertet 2026-10-27
In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 manipulated PC Worx or Config+ files could lead to a heap buffer overflow and a read access violation. Availability, integrity, or confidentiality of an application programming workstation might be compromised by attacks using these vulnerabilities.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Ein Hersteller-Fix ist verfügbar.
- Behobenphoenix_contact_psirt
With the next version of Automationworx Software Suite an already implemented remediation measure needs to be corrected to prevent the release of unallocated memory.To prevent the read access violation the validation of the input data will be improved. We strongly recommend customers to upgrade to Automation Worx Software Suite > 1.89.
- Mitigationphoenix_contact_psirt
We strongly recommend customers to exchange project files only using secure file exchange services. Project files should not be exchanged via unencrypted email.
- MitigationAutomation Worx Config+cisa_csaf_ot
CERT@VDE has released an advisory on these vulnerabilities, accessible here.
https://cert.vde.com/en/advisories/VDE-2022-048/ - MitigationAutomation Worx PC Worxcisa_csaf_ot
CERT@VDE has released an advisory on these vulnerabilities, accessible here.
https://cert.vde.com/en/advisories/VDE-2022-048/ - MitigationAutomation Worx PC Worx Expresscisa_csaf_ot
CERT@VDE has released an advisory on these vulnerabilities, accessible here.
https://cert.vde.com/en/advisories/VDE-2022-048/
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen
SSVC
Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (22)
Betroffene Produkte und Versionsbereiche.
- phoenixcontact automationworx software suite= 1.89nvdUScpe:2.3:a:phoenixcontact:automationworx_software_suite:*:*:*:*:*:*:*:*
Advisories (2)
Hersteller- und Ökosystem-Meldungen dazu.
- VDE-2022-048PHOENIX CONTACT: Automationworx BCP File Parsing Vulnerabilities2022-11-15csaf · phoenix_contact_psirtDE
Manipulated PC Worx or Config+ files could lead to a heap buffer overflow, release of unallocated memory or a read access violation due to insufficient validation of input data.The attacker needs to get access to an original bus configuration file (*.bcp) to be able to manipulate data inside. After manipulation the attacker needs to exchange the original file by the manipulated one on the application programming workstation. Update A, 2022-11-14 removed the sentence "Automated systems in operation which were programmed with one of the above-mentioned products are not affected." from Impact.
- ICSA-22-326-03Phoenix Contact Automation Worx2022-11-22icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could lead to a heap buffer overflow, release of unallocated memory, or a read access violation.
auch bekannt als (3)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (7)
Externe Belege — Patches, Meldungen, Analysen.
- https://cert.vde.com/en/advisories/VDE-2022-048/cnnvd
- https://cxsecurity.com/cveshow/CVE-2022-3461/cnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2022-3461cnnvd
- https://www.auscert.org.au/bulletins/ESB-2022.6115cnnvd
- https://www.phoenixcontact.com/en-pcPatchcnnvd
- https://cert.vde.com/en/advisories/VDE-2022-048/enisa_euvd
- https://cert.vde.com/en/advisories/VDE-2022-048/Third Party Advisorynvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan