Latest vulnerabilities for vendor "phoenixcontact"

8.1

First published (updated )

CVE-2024-43393

Phoenixcontact Tc Mguard Rs4000 4g Vzw Vpn FirmwarePhoenix Contact: Firewall reconfiguration through the FW_environment variables in MGUARD devices

8.1

First published (updated )

CVE-2024-43392

Phoenixcontact Tc Mguard Rs4000 4g Vzw Vpn FirmwarePhoenix Contact: Firewall reconfiguration through the FW_PORTFORWARDING.SRC_IP in MGUARD devices

8.1

First published (updated )

CVE-2024-43391

Phoenixcontact Tc Mguard Rs4000 4g Vzw Vpn FirmwarePhoenix Contact: Firewall reconfiguration due to improper input validation in MGUARD devices

8.1

First published (updated )

CVE-2024-43390

Phoenixcontact Tc Mguard Rs4000 4g Vzw Vpn FirmwarePhoenix Contact: OSPF reconfiguration due to improper input validation in MGUARD devices

8.1

First published (updated )

CVE-2024-43389

Never miss a vulnerability like this again

Phoenixcontact Tc Mguard Rs4000 4g Vzw Vpn FirmwarePhoenix Contact: SNMP reconfiguration due to improper input validation in MGUARD devices

8.8

First published (updated )

CVE-2024-43388

Phoenixcontact Tc Mguard Rs4000 4g Vzw Vpn FirmwarePhoenix Contact: Access files due to improper neutralization of special elements in MGUARD devices

8.8

First published (updated )

CVE-2024-43387

Phoenixcontact Tc Mguard Rs4000 4g Vzw Vpn FirmwarePhoenix Contact: OS command execution through EMAIL_NOTIFICATION.TO in mGuard devices.

8.8

First published (updated )

CVE-2024-43386

Phoenixcontact Tc Mguard Rs4000 4g Vzw Vpn FirmwarePhoenix Contact: OS command execution through PROXY_HTTP_PORT in mGuard devices

8.8

First published (updated )

CVE-2024-43385

Phoenixcontact Tc Mguard Rs4000 4g Vzw Vpn FirmwarePhoenix Contact: OS command execution in MGUARD products

8.8

EPSS

0.05%

First published (updated )

CVE-2024-7699

Never miss a vulnerability like this again

Phoenixcontact Tc Mguard Rs4000 4g Vzw Vpn FirmwarePhoenix Contact: Access to CSRF tokens of higher privileged users in MGUARD products

5.7

EPSS

0.05%

First published (updated )

CVE-2024-7698

Phoenixcontact Tc Mguard Rs4000 4g Vzw Vpn FirmwarePhoenix Contact: Multiple mGuard devices are vulnerable to a drain of open file descriptors.

5.3

EPSS

0.05%

First published (updated )

CVE-2024-7734

Phoenixcontact Charx Sec-3150 FirmwarePhoenix Contact: Start sequence allows attack during the boot process

7.5

First published (updated )

CVE-2024-3913

Phoenixcontact Axc F 1152 FirmwarePHOENIX CONTACT: PLCnext Control prone to download of code without integrity check

6.5

First published (updated )

CVE-2023-46144

Phoenix Contact AutomationworxPhoenix Contact: Classic line industrial controllers prone to inadequate integrity check of PLC

7.5

First published (updated )

CVE-2023-46143

Never miss a vulnerability like this again

Phoenixcontact Axc F 1152 FirmwarePHOENIX CONTACT: Insufficient Read and Write Protection to Logic and Runtime Data in PLCnext Control

8.8

First published (updated )

CVE-2023-46142

Phoenix Contact AutomationworxPhoenix Contact: Automation Worx and classic line controllers prone to Incorrect Permission Assignment for Critical Resource

9.8

First published (updated )

CVE-2023-46141

Phoenixcontact MultiprogPhoenix Contact: ProConOs prone to Download of Code Without Integrity Check

7.5

EPSS

0.08%

First published (updated )

CVE-2023-5592

Phoenixcontact MultiprogPhoenix Contact ProConOS prone to Incorrect Permission Assignment for Critical Resource

9.8

First published (updated )

CVE-2023-0757

Phoenixcontact Module Type Package DesignerWibu: Buffer Overflow in CodeMeter Runtime

9.8

First published (updated )

CVE-2023-3935

Never miss a vulnerability like this again

Phoenixcontact Wp 6070-wvps FirmwarePHOENIX CONTACT: Use of Hard-coded Credentials in WP 6xxx Web panels

4.9

First published (updated )

CVE-2023-37858

Phoenixcontact Wp 6070-wvps FirmwarePHOENIX CONTACT: Use of Hard-coded Credentials in WP 6xxx Web panels

7.2

First published (updated )

CVE-2023-37857

Phoenixcontact Wp 6070-wvps FirmwarePHOENIX CONTACT: Unauthorized read-access of root filesystem in WP 6xxx Web panels

4.3

First published (updated )

CVE-2023-37855

Phoenixcontact Wp 6070-wvps FirmwarePHOENIX CONTACT: Unauthorized read-access of root filesystem in WP 6xxx Web panels

4.3

First published (updated )

CVE-2023-37856

Phoenixcontact Wp 6070-wvps FirmwarePHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels

7.2

First published (updated )

CVE-2023-37863

Never miss a vulnerability like this again

Phoenixcontact Wp 6070-wvps FirmwarePHOENIX CONTACT: Improper Privilege Management in WP 6xxx Web panels

7.2

First published (updated )

CVE-2023-37859

Phoenixcontact Wp 6070-wvps FirmwarePHOENIX CONTACT: WP 6xxx Web panels prone to download code without integrity check

7.2

First published (updated )

CVE-2023-37864

Phoenixcontact Wp 6070-wvps FirmwarePHOENIX CONTACT: Missing Authorization in WP 6xxx Web panels

8.2

First published (updated )

CVE-2023-37862

Phoenixcontact Wp 6070-wvps FirmwarePHOENIX CONTACT: Missing Authorization in WP 6xxx Web panels

7.5

EPSS

0.11%

First published (updated )

CVE-2023-37860

Phoenixcontact Wp 6070-wvps FirmwarePHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels

8.8

First published (updated )

CVE-2023-37861

Never miss a vulnerability like this again

Phoenixcontact Cloud Client 1101t-tx FirmwarePHOENIX CONTACT: Denial-of-Service due to malicious XML files in TC ROUTER, TC CLOUD CLIENT and CLOUD CLIENT

4.9

First published (updated )

CVE-2023-3569

Phoenixcontact Cloud Client 1101t-tx FirmwarePHOENIX CONTACT: Cross-site Scripting vulnerability in TC ROUTER, TC CLOUD CLIENT and CLOUD CLIENT devices

9.6

First published (updated )

CVE-2023-3526

Phoenixcontact Wp 6070-wvps FirmwarePHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels

8.8

First published (updated )

CVE-2023-3570

Phoenixcontact Wp 6070-wvps FirmwarePHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels

First published (updated )

CVE-2023-3572

Phoenixcontact Wp 6070-wvps FirmwarePHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels

8.8

First published (updated )

CVE-2023-3571

Never miss a vulnerability like this again

Phoenixcontact Wp 6070-wvps FirmwarePHOENIX CONTACT: Command Injection in WP 6xxx Web panels

8.8

First published (updated )

CVE-2023-3573

Phoenixcontact Fl Mguard 2102 FirmwarePHOENIX CONTACT: FL/TC MGUARD prone to Improper Input Validation

5.3

First published (updated )

CVE-2023-2673

Phoenixcontact Energy Axc PuPHOENIX CONTACT: Directory Traversal Vulnerability in ENERGY AXC PU Web service

8.8

First published (updated )

CVE-2023-1109

Phoenixcontact Automationworx Software SuiteBuffer Overflow in PHOENIX CONTACT Automationworx Software Suite

7.8

First published (updated )

CVE-2022-3461

Phoenixcontact Automationworx Software SuiteOut-of-bounds Read in PHOENIX CONTACT Automationworx Software Suite

7.8

First published (updated )

CVE-2022-3737

Never miss a vulnerability like this again

Phoenixcontact Fl Mguard Centerport FirmwareDenial-of-Service vulnerability in PHOENIX CONTACT mGuard product family

7.5

First published (updated )

CVE-2022-3480

Phoenixcontact Fl Mguard DmPHOENIX CONTACT: FL MGUARD DM version 1.12.0 and 1.13.0 Improper Privilege Management

7.5

First published (updated )

CVE-2021-34579

Phoenixcontact MultiprogInsufficient Verification of Data Vulnerability in ProConOS/ProConOS eCLR SDK and MULTIPROG Engineering tool

First published (updated )

CVE-2022-31801

Phoenixcontact Axc 1050 FirmwareInsufficient Verification of Data Vulnerability in PHOENIX CONTACT classic line industrial controllers

First published (updated )

CVE-2022-31800

Phoenixcontact Rad-ism-900-en-bd FirmwareRemote Code Execution in all versions of various RAD-ISM-900-EN-* devices by PHOENIX CONTACT

9.1

First published (updated )

CVE-2022-29897

Never miss a vulnerability like this again

Phoenixcontact Rad-ism-900-en-bd FirmwareRemote Code Execution in all versions of various RAD-ISM-900-EN-* devices by PHOENIX CONTACT

9.1

First published (updated )

CVE-2022-29898

Phoenixcontact Fl Switch 2005 FirmwarePHOENIX CONTACT: FL SWITCH 2xxx series incorrect privilege assignment

First published (updated )

CVE-2022-22509

Phoenixcontact Fl Mguard 1102 FirmwarePhoenix Contact: FL MGUARD lack of memory release in remote logging functionality

7.5

First published (updated )

CVE-2021-34598

Phoenixcontact Fl Mguard 1102 FirmwarePhoenix Contact: FL MGUARD XSS through web-based management and REST API

4.8

First published (updated )

CVE-2021-34582

Phoenixcontact Pc WorxPhoenix Contact: PC Worx/-Express prone to improper input validation vulnerability

7.8

First published (updated )

CVE-2021-34597

Never miss a vulnerability like this again