high7.8
CVE-2020-12498
mwe file parsing in Phoenix Contact PC Worx and PC Worx Express version 1.87 and earlier is vulnerable to out-of-bounds read remote code execution.
Impact
mwe file parsing in Phoenix Contact PC Worx and PC Worx Express version 1.87 and earlier is vulnerable to out-of-bounds read remote code execution. Manipulated PC Worx projects could lead to a remote code execution due to insufficient input data validation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phoenixcontact | Pc Worx | before 1.87 |
| Phoenixcontact | Pc Worx Express | through 1.87 |