What’s Vulnerable › Vulnerabilities

CVE-2022-3461: Buffer Overflow in PHOENIX CONTACT Automationworx Software Suite

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-11-15 · updated 2026-06-17
• Weakness: CWE-119

Description

In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 manipulated PC Worx or Config+ files could lead to a heap buffer overflow and a read access violation. Availability, integrity, or confidentiality of an application programming workstation might be compromised by attacks using these vulnerabilities.

Affected products

• Phoenixcontact Automationworx Software Suite: 1.89

References

• https://cert.vde.com/en/advisories/VDE-2022-048/
• https://cert.vde.com/en/advisories/VDE-2022-048/

Get alerted when CVE-2022-3461 or the next vulnerability affects your stack