← CVE Intelligence

CVE-2021-34597

Phoenix Contact: PC Worx/-Express prone to improper input validation vulnerability PUBLISHED

Description (CNA)

Improper Input Validation vulnerability in PC Worx Automation Suite of Phoenix Contact up to version 1.88 could allow an attacker with a manipulated project file to unpack arbitrary files outside of the selected project directory.

Affected (CNA)

Vendor / productVersions
Phoenix Contact / PC Worxaffected PC Worx through 1.88; affected PC Worx-Express through 1.88

CWE

CWE-20

References

ADP enrichment

CVE

No English description supplied.