high7.8
CVE-2021-34597
Improper Input Validation vulnerability in PC Worx Automation Suite of Phoenix Contact up to version 1.88 could allow an attacker with a manipulated project fi…
Impact
Improper Input Validation vulnerability in PC Worx Automation Suite of Phoenix Contact up to version 1.88 could allow an attacker with a manipulated project file to unpack arbitrary files outside of the selected project directory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phoenixcontact | Pc Worx | through 1.88 |
| Phoenixcontact | Pc Worx Express | through 1.88 |