CVE-2019-16675: Phoenix Contact Automationworx BCP File Parsing Memory Corruption Remote Code Execution Vulnerability
An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86. A manipulated PC Worx or Config+ project file could lead to an Out-of-bounds Read and remote code execution. The attacker needs to get access to an original PC Worx or Config+ project to be able to manipulate data inside. After manipulation, the attacker needs to exchange the original files with the manipulated ones on the application programming workstation.
Other sources
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Phoenix Contact Automationworx. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of BCP files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process.
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Phoenix Contact Automationworx. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of MWT files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-16675?
The severity of CVE-2019-16675 is high with a severity value of 7.8.
What is the affected software of CVE-2019-16675?
The affected software of CVE-2019-16675 is Phoenix Contact Automationworx with versions up to 1.86.
How can this vulnerability be exploited?
This vulnerability can be exploited by remote attackers who trick the user into visiting a malicious page or opening a malicious file.
How can I fix CVE-2019-16675?
To fix CVE-2019-16675, users should update to the latest version of Phoenix Contact Automationworx (version 1.86 or higher) as recommended by the vendor.
Where can I find more information about CVE-2019-16675?
You can find more information about CVE-2019-16675 in the advisory links provided: [cert.vde.com](https://cert.vde.com/en-us/advisories), [us-cert.gov](https://www.us-cert.gov/ics/advisories/icsa-19-302-01), [zerodayiniative.com](https://www.zerodayinitiative.com/advisories/ZDI-19-922/).