high7.8
CVE-2020-12497
PLCopen XML file parsing in Phoenix Contact PC Worx and PC Worx Express version 1.87 and earlier can lead to a stack-based overflow.
Impact
PLCopen XML file parsing in Phoenix Contact PC Worx and PC Worx Express version 1.87 and earlier can lead to a stack-based overflow. Manipulated PC Worx projects could lead to a remote code execution due to insufficient input data validation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phoenixcontact | Pc Worx | before 1.87 |
| Phoenixcontact | Pc Worx Express | through 1.87 |
Weakness classification
References
- NVD record
- CVE.org record
- https://cert.vde.com/de-de/advisories/vde-2020-023
- https://www.zerodayinitiative.com/advisories/ZDI-20-825/
- https://www.zerodayinitiative.com/advisories/ZDI-21-398/
- https://cert.vde.com/de-de/advisories/vde-2020-023
- https://www.zerodayinitiative.com/advisories/ZDI-20-825/
- https://www.zerodayinitiative.com/advisories/ZDI-21-398/