Latest vulnerabilities for vendor "phoenixcontact"

First published (updated )

CVE-2017-16743

Phoenixcontact Plcnext FirmwarePhoenix Contact PLCnext Control Devices versions before 2021.0 LTS: An attacker can use this vulnerability i.e. to open a reverse shell with root privileges.

First published (updated )

CVE-2020-12519

Phoenixcontact MultiprogInsufficient Verification of Data Vulnerability in ProConOS/ProConOS eCLR SDK and MULTIPROG Engineering tool

First published (updated )

CVE-2022-31801

Phoenixcontact Axc 1050 FirmwareInsufficient Verification of Data Vulnerability in PHOENIX CONTACT classic line industrial controllers

First published (updated )

CVE-2022-31800

Phoenixcontact Wp 6070-wvps FirmwarePHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels

First published (updated )

CVE-2023-3572

Never miss a vulnerability like this again

Phoenixcontact Module Type Package DesignerWibu: Buffer Overflow in CodeMeter Runtime

9.8

First published (updated )

CVE-2023-3935

Phoenixcontact Mguard FirmwareAn issue was discovered on Phoenix Contact mGuard devices that have been updated to Version 8.4.0. W…

9.8

First published (updated )

CVE-2017-5159

Phoenixcontact Fl Switch 3005 FirmwareThe WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 allows for plaintext tr…

9.8

First published (updated )

CVE-2018-13992

Phoenixcontact Fl Switch 3005 FirmwareThe WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions prior to 1.35 is vulnerable to brut…

9.8

First published (updated )

CVE-2018-13990

Phoenixcontact Ilc 131 Eth FirmwareMultiple Phoenix Contact devices allow remote attackers to establish TCP sessions to port 1962 and o…

9.8

First published (updated )

CVE-2019-9201

Never miss a vulnerability like this again

Phoenix Contact AutomationworxPhoenix Contact: Automation Worx and classic line controllers prone to Incorrect Permission Assignment for Critical Resource

9.8

First published (updated )

CVE-2023-46141

Phoenixcontact MultiprogPhoenix Contact ProConOS prone to Incorrect Permission Assignment for Critical Resource

9.8

First published (updated )

CVE-2023-0757

Phoenixcontact Cloud Client 1101t-tx FirmwarePHOENIX CONTACT: Cross-site Scripting vulnerability in TC ROUTER, TC CLOUD CLIENT and CLOUD CLIENT devices

9.6

First published (updated )

CVE-2023-3526

Phoenixcontact Ilc 2050 Bi FirmwareAn issue was discovered on Phoenix Contact Emalytics Controller ILC 2050 BI before 1.2.3 and BI-L be…

9.4

First published (updated )

CVE-2020-8768

Phoenixcontact Fl Switch 3005 FirmwareBuffer Overflow

9.3

First published (updated )

CVE-2018-10731

Never miss a vulnerability like this again

Phoenixcontact Tc Mguard Rs4000 4g Vzw Vpn FirmwarePhoenix Contact mGuard Devices versions before 8.8.3: LAN ports get functional after reboot even if they are disabled in the device configuration

9.1

First published (updated )

CVE-2020-12523

Phoenixcontact Fl Switch 3005 FirmwareOS Command Injection, Command Injection

9.1

First published (updated )

CVE-2018-10730

Phoenixcontact Rad-ism-900-en-bd FirmwareRemote Code Execution in all versions of various RAD-ISM-900-EN-* devices by PHOENIX CONTACT

9.1

First published (updated )

CVE-2022-29897

Phoenixcontact Rad-ism-900-en-bd FirmwareRemote Code Execution in all versions of various RAD-ISM-900-EN-* devices by PHOENIX CONTACT

9.1

First published (updated )

CVE-2022-29898

Redhat Enterprise Linux EusIt was discovered that the DCG (Distributed Garbage Collector) implementation in the RMI component o…

First published (updated )

CVE-2017-10102

Never miss a vulnerability like this again

Phoenixcontact Rad-80211-xd\/hp-bus FirmwareCommand Injection

First published (updated )

CVE-2019-9743

Phoenixcontact Plcnext FirmwarePhoenix Contact PLCnext Control Devices versions before 2021.0 LTS: An authenticated low privileged user could embed malicious Javascript code to gain admin rights when the admin user visits the vulnerable website (local privilege escalation).

First published (updated )

CVE-2020-12517

Phoenixcontact Fl Switch 2005 FirmwarePHOENIX CONTACT: FL SWITCH 2xxx series incorrect privilege assignment

First published (updated )

CVE-2022-22509

Phoenixcontact Tc Router 3002t-4g FirmwareOS Command Injection

First published (updated )

CVE-2020-9436

Phoenixcontact Tc Mguard Rs4000 4g Vzw Vpn FirmwarePhoenix Contact: OS command execution through EMAIL_NOTIFICATION.TO in mGuard devices.

8.8

First published (updated )

CVE-2024-43386

Never miss a vulnerability like this again

Phoenixcontact Tc Mguard Rs4000 4g Vzw Vpn FirmwarePhoenix Contact: OS command execution in MGUARD products

8.8

EPSS

0.05%

First published (updated )

CVE-2024-7699

Phoenixcontact Tc Mguard Rs4000 4g Vzw Vpn FirmwarePhoenix Contact: OS command execution through PROXY_HTTP_PORT in mGuard devices

8.8

First published (updated )

CVE-2024-43385

Phoenixcontact Tc Mguard Rs4000 4g Vzw Vpn FirmwarePhoenix Contact: Access files due to improper neutralization of special elements in MGUARD devices

8.8

First published (updated )

CVE-2024-43387

Phoenixcontact Tc Mguard Rs4000 4g Vzw Vpn FirmwarePhoenix Contact: SNMP reconfiguration due to improper input validation in MGUARD devices

8.8

First published (updated )

CVE-2024-43388

Phoenixcontact Automationworx Software SuitePhoenix Contact Automationworx BCP File Parsing Uninitialized Pointer Remote Code Execution Vulnerability

8.8

First published (updated )

CVE-2019-12870

Never miss a vulnerability like this again