Vulnerability index

Browse CVEs

24 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Multiprog HIGH 7.5
CVE-2023-5592

Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT MULTIPROG, PHOENIX CONTACT ProConOS eCLR (SDK) allows an unauthenticated re…

Mitigation only
Fix from $1,950 2023-12-14
Automationworx Software Suite HIGH 7.5
CVE-2023-46143

Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT classic line PLCs allows an unauthenticated remote attacker to modify some …

Mitigation only
Fix from $1,950 2023-12-14
Multiprog CRITICAL 9.8
CVE-2023-0757

Incorrect Permission Assignment for Critical Resource vulnerability in PHOENIX CONTACT MULTIPROG, PHOENIX CONTACT ProConOS eCLR (SDK) allows an unaut…

Mitigation only
Fix from $2,300 2023-12-14
Automationworx Software Suite CRITICAL 9.8
CVE-2023-46141

Incorrect Permission Assignment for Critical Resource vulnerability in multiple products of the PHOENIX CONTACT classic line allow an remote unauthen…

Mitigation only
Fix from $2,300 2023-12-14
Automationworx Software Suite HIGH 7.8
CVE-2022-3737

In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 memory can be read beyond the intended scope due to insufficient validation of in…

Mitigation only
Fix from $1,950 2022-11-15
Automationworx Software Suite HIGH 7.8
CVE-2022-3461

In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 manipulated PC Worx or Config+ files could lead to a heap buffer overflow and a r…

Mitigation only
Fix from $1,950 2022-11-15
Fl Mguard Dm HIGH 7.5
CVE-2021-34579

In Phoenix Contact: FL MGUARD DM version 1.12.0 and 1.13.0 access to the Apache web server being installed as part of the FL MGUARD DM on Microsoft W…

Mitigation only
Fix from $1,950 2022-11-09
Axc 1050 Firmware CRITICAL 9.8
CVE-2022-31800

An unauthenticated, remote attacker could upload malicious logic to devices based on ProConOS/ProConOS eCLR in order to gain full control over the de…

No fix yet
Fix from $2,300 2022-06-21
Multiprog CRITICAL 9.8
CVE-2022-31801

An unauthenticated, remote attacker could upload malicious logic to the devices based on ProConOS/ProConOS eCLR in order to gain full control over th…

Mitigation only
Fix from $2,300 2022-06-21
Rad Ism 900 En Bd Firmware CRITICAL 9.1
CVE-2022-29898

On various RAD-ISM-900-EN-* devices by PHOENIX CONTACT an admin user could use the configuration file uploader in the WebUI to execute arbitrary code…

Mitigation only
Fix from $2,300 2022-05-11
Rad Ism 900 En Bd Firmware CRITICAL 9.1
CVE-2022-29897

On various RAD-ISM-900-EN-* devices by PHOENIX CONTACT an admin user could use the traceroute utility integrated in the WebUI to execute arbitrary co…

Mitigation only
Fix from $2,300 2022-05-11
Fl Switch 2005 Firmware HIGH 8.8
CVE-2022-22509

In Phoenix Contact FL SWITCH Series 2xxx in version 3.00 an incorrect privilege assignment allows an low privileged user to enable full access to the…

Mitigation only
Fix from $1,950 2022-02-02
Fl Mguard 1102 Firmware HIGH 7.5
CVE-2021-34598

In Phoenix Contact FL MGUARD 1102 and 1105 in Versions 1.4.0, 1.4.1 and 1.5.0 the remote logging functionality is impaired by the lack of memory rele…

Mitigation only
Fix from $1,950 2021-11-10
Ilc1x0 Firmware HIGH 7.5
CVE-2021-33541

Phoenix Contact Classic Line Controllers ILC1x0 and ILC1x1 in all versions/variants are affected by a Denial-of-Service vulnerability. The communicat…

Mitigation only
Fix from $1,950 2021-06-25
Btp 2043w Firmware HIGH 7.5
CVE-2020-12524

Uncontrolled Resource Consumption can be exploited to cause the Phoenix Contact HMIs BTP 2043W, BTP 2070W and BTP 2102W in all versions to become unr…

Mitigation only
Fix from $1,950 2020-12-02
Rad 80211 Xd\/hp Bus Firmware HIGH 8.8
CVE-2019-9743

An issue was discovered on PHOENIX CONTACT RAD-80211-XD and RAD-80211-XD/HP-BUS devices. Command injection can occur in the WebHMI component.

No fix yet
Fix from $1,950 2019-03-26
Fl Nat Smn 8tx M Dmg Firmware HIGH 8.8
CVE-2019-9744

An issue was discovered on PHOENIX CONTACT FL NAT SMCS 8TX, FL NAT SMN 8TX, FL NAT SMN 8TX-M, and FL NAT SMN 8TX-M-DMG devices. There is unauthorized…

Mitigation only
Fix from $1,950 2019-03-26
Ilc 131 Eth Firmware CRITICAL 9.8
CVE-2019-9201

Multiple Phoenix Contact devices allow remote attackers to establish TCP sessions to port 1962 and obtain sensitive information or make changes, as d…

No fix yet
Fix from $2,300 2019-02-26
Ilc Plcs Firmware HIGH 7.3
CVE-2016-8366EPSS 6%

Webvisit in Phoenix Contact ILC PLCs offers a password macro to protect HMI pages on the PLC against casual or coincidental opening of HMI pages by t…

No fix yet
Fix from $1,950 2018-04-05
Ilc Plcs Firmware HIGH 7.3
CVE-2016-8371EPSS 11%

The web server in Phoenix Contact ILC PLCs can be accessed without authenticating even if the authentication mechanism is enabled.

No fix yet
Fix from $1,950 2018-04-05
Ilc Plcs Firmware HIGH 7.3
CVE-2016-8380EPSS 11%

The web server in Phoenix Contact ILC PLCs allows access to read and write PLC variables without authentication.

No fix yet
Fix from $1,950 2018-04-05
Fl Comserver Basic 232 Firmware MEDIUM 6.1
CVE-2017-16723

A Cross-site Scripting issue was discovered in PHOENIX CONTACT FL COMSERVER BASIC 232/422/485, FL COMSERVER UNI 232/422/485, FL COMSERVER BAS 232/422…

Mitigation only
Fix from $1,600 2017-12-11
Mguard Firmware CRITICAL 9.8
CVE-2017-5159

An issue was discovered on Phoenix Contact mGuard devices that have been updated to Version 8.4.0. When updating an mGuard device to Version 8.4.0 vi…

Mitigation only
Fix from $2,300 2017-02-13
Fl Il 24 Bk Pac MEDIUM 5.0
CVE-2008-7199

Phoenix Contact FL IL 24 BK-PAC allows remote attackers to cause a denial of service (hang) via (1) unspecified manipulations as demonstrated by a Ne…

Mitigation only
Fix from $1,600 2009-09-10