CVE-2022-3737 — Out-of-bounds Read in PHOENIX CONTACT Automationworx Software Suite

CVE-2022-3737

Out-of-bounds Read in PHOENIX CONTACT Automationworx Software Suite PUBLISHED

Description (CNA)

In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 memory can be read beyond the intended scope due to insufficient validation of input data. Availability, integrity, or confidentiality of an application programming workstation might be compromised by attacks using these vulnerabilities.

Affected (CNA)

Vendor / product	Versions
PHOENIX CONTACT / Config+	affected 0 through 1.89
PHOENIX CONTACT / PC Worx	affected 0 through 1.89
PHOENIX CONTACT / PC Worx Express	affected 0 through 1.89

CWE

CWE-125

References

https://cert.vde.com/en/advisories/VDE-2022-048/

ADP enrichment

CVE

No English description supplied.

https://cert.vde.com/en/advisories/VDE-2022-048/

CISA-ADP

No English description supplied.

No references supplied.