ZDI-CAN-7784: Phoenix Contact Automationworx BCP File Parsing Uninitialized Pointer Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Phoenix Contact Automationworx. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of BCP files. The issue results from the lack of proper initialization of a pointer prior to accessing it. An attacker can leverage this vulnerability to execute code in the context of the current process.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-7784?
The severity of ZDI-CAN-7784 is considered high due to the ability of remote attackers to execute arbitrary code.
How do I fix ZDI-CAN-7784?
To fix ZDI-CAN-7784, ensure that you apply the latest security updates and patches provided by Phoenix Contact for Automationworx.
What types of attacks are possible with ZDI-CAN-7784?
ZDI-CAN-7784 allows remote code execution, which can potentially lead to full system compromise if exploited.
Is user interaction required for exploiting ZDI-CAN-7784?
Yes, user interaction is required for exploiting ZDI-CAN-7784, as the target must visit a malicious page or open a malicious file.
Which software is affected by ZDI-CAN-7784?
ZDI-CAN-7784 specifically affects the Phoenix Contact Automationworx software.