An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86. A manipulated PC Worx or Config+ project file could lead to an Out-of-bounds Read and remote code execution. The attacker needs to get access to an original PC Worx or Config+ project to be able to manipulate data inside. After manipulation, the attacker needs to exchange the original files with the manipulated ones on the application programming workstation.
References
| Link | Resource |
|---|---|
| https://cert.vde.com/en-us/advisories | Third Party Advisory |
| https://www.us-cert.gov/ics/advisories/icsa-19-302-01 | Third Party Advisory US Government Resource |
| https://www.zerodayinitiative.com/advisories/ZDI-19-922/ | Third Party Advisory VDB Entry |
| https://www.zerodayinitiative.com/advisories/ZDI-19-991/ | |
| https://cert.vde.com/en-us/advisories | Third Party Advisory |
| https://www.us-cert.gov/ics/advisories/icsa-19-302-01 | Third Party Advisory US Government Resource |
| https://www.zerodayinitiative.com/advisories/ZDI-19-922/ | Third Party Advisory VDB Entry |
| https://www.zerodayinitiative.com/advisories/ZDI-19-991/ |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 04:30
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://cert.vde.com/en-us/advisories - Third Party Advisory | |
| References | () https://www.us-cert.gov/ics/advisories/icsa-19-302-01 - Third Party Advisory, US Government Resource | |
| References | () https://www.zerodayinitiative.com/advisories/ZDI-19-922/ - Third Party Advisory, VDB Entry | |
| References | () https://www.zerodayinitiative.com/advisories/ZDI-19-991/ - |
Information
Published : 2019-10-31 22:15
Updated : 2024-11-21 04:30
NVD link : CVE-2019-16675
Mitre link : CVE-2019-16675
CVE.ORG link : CVE-2019-16675
JSON object : View
Products Affected
phoenixcontact
- pc_worx_express
- config\+
- pc_worx
CWE
CWE-125
Out-of-bounds Read