CVE-2022-3461
highpriority · track · 0EPSS 0.002 · 12 %ileDEEUUSEPSS · scored 2026-10-27
In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 manipulated PC Worx or Config+ files could lead to a heap buffer overflow and a read access violation. Availability, integrity, or confidentiality of an application programming workstation might be compromised by attacks using these vulnerabilities.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
A vendor fix is available.
- Fixedphoenix_contact_psirt
With the next version of Automationworx Software Suite an already implemented remediation measure needs to be corrected to prevent the release of unallocated memory.To prevent the read access violation the validation of the input data will be improved. We strongly recommend customers to upgrade to Automation Worx Software Suite > 1.89.
- Mitigationphoenix_contact_psirt
We strongly recommend customers to exchange project files only using secure file exchange services. Project files should not be exchanged via unencrypted email.
- MitigationAutomation Worx Config+cisa_csaf_ot
CERT@VDE has released an advisory on these vulnerabilities, accessible here.
https://cert.vde.com/en/advisories/VDE-2022-048/ - MitigationAutomation Worx PC Worxcisa_csaf_ot
CERT@VDE has released an advisory on these vulnerabilities, accessible here.
https://cert.vde.com/en/advisories/VDE-2022-048/ - MitigationAutomation Worx PC Worx Expresscisa_csaf_ot
CERT@VDE has released an advisory on these vulnerabilities, accessible here.
https://cert.vde.com/en/advisories/VDE-2022-048/
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (22)
Products and version ranges known to be affected.
- phoenixcontact automationworx software suite= 1.89nvdUScpe:2.3:a:phoenixcontact:automationworx_software_suite:*:*:*:*:*:*:*:*
advisories (2)
Vendor and ecosystem advisories describing this.
- VDE-2022-048PHOENIX CONTACT: Automationworx BCP File Parsing Vulnerabilities2022-11-15csaf · phoenix_contact_psirtDE
Manipulated PC Worx or Config+ files could lead to a heap buffer overflow, release of unallocated memory or a read access violation due to insufficient validation of input data.The attacker needs to get access to an original bus configuration file (*.bcp) to be able to manipulate data inside. After manipulation the attacker needs to exchange the original file by the manipulated one on the application programming workstation. Update A, 2022-11-14 removed the sentence "Automated systems in operation which were programmed with one of the above-mentioned products are not affected." from Impact.
- ICSA-22-326-03Phoenix Contact Automation Worx2022-11-22icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could lead to a heap buffer overflow, release of unallocated memory, or a read access violation.
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (7)
External citations — patches, advisories, analysis.
- https://cert.vde.com/en/advisories/VDE-2022-048/cnnvd
- https://cxsecurity.com/cveshow/CVE-2022-3461/cnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2022-3461cnnvd
- https://www.auscert.org.au/bulletins/ESB-2022.6115cnnvd
- https://www.phoenixcontact.com/en-pcPatchcnnvd
- https://cert.vde.com/en/advisories/VDE-2022-048/enisa_euvd
- https://cert.vde.com/en/advisories/VDE-2022-048/Third Party Advisorynvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan