Skip to content
Noroxi

phoenixcontact records

156 published records for vendor phoenixcontact.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
10
With a fix record
40.4%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25
  10. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

156 records
  • CVE-2017-5753
    50Plan

    Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an at

    MediumCVSS 5.6Proof of conceptEPSS 93%

    intel · atom cJan 4, 2018

  • CVE-2019-9201
    40Plan

    Multiple Phoenix Contact devices allow remote attackers to establish TCP sessions to port 1962 and obtain sensitive information or make chan

    CriticalCVSS 9.8No exploitEPSS 3%

    phoenixcontact · ilc 131 eth firmwareFeb 26, 2019

  • CVE-2017-16743
    40Plan

    An Improper Authorization issue was discovered in PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, and 48xxx Series products running firmware Version 1

    CriticalCVSS 9.8No exploitEPSS 3%

    phoenixcontact · fl switch 3005 firmwareJan 12, 2018

  • CVE-2017-5159
    40Plan

    An issue was discovered on Phoenix Contact mGuard devices that have been updated to Version 8.4.0.

    CriticalCVSS 9.8No exploitEPSS 2%

    phoenixcontact · mguard firmwareFeb 13, 2017

  • CVE-2018-13990
    40Plan

    The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions prior to 1.35 is vulnerable to brute-force attacks, because of Improper Res

    CriticalCVSS 9.8No exploitEPSS 2%

    phoenixcontact · fl switch 3005 firmwareMay 6, 2019

  • CVE-2023-3935
    40Plan

    Wibu: Buffer Overflow in CodeMeter Runtime

    CriticalCVSS 9.8No exploitEPSS 1%

    wibu · codemeter runtimeSep 13, 2023

  • CVE-2023-3572
    40Plan

    PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels

    CriticalCVSS 10.0No exploitEPSS 1%

    phoenixcontact · wp 6070-wvps firmwareAug 8, 2023

  • CVE-2023-3526
    39Monitor

    PHOENIX CONTACT: Cross-site Scripting vulnerability in TC ROUTER, TC CLOUD CLIENT and CLOUD CLIENT devices

    CriticalCVSS 9.6No exploitEPSS 1%

    phoenixcontact · cloud client 1101t-tx firmwareAug 8, 2023

  • CVE-2022-31800
    39Monitor

    Insufficient Verification of Data Vulnerability in PHOENIX CONTACT classic line industrial controllers

    CriticalCVSS 9.8No exploitEPSS 1%

    phoenixcontact · axc 1050 firmwareJun 21, 2022

  • CVE-2024-25995
    39Monitor

    PHOENIX CONTACT: Remote code execution in CHARX Series

    CriticalCVSS 9.8No exploitEPSS 1%

    phoenixcontact · charx sec-3000 firmwareMar 12, 2024

  • CVE-2022-31801
    39Monitor

    Insufficient Verification of Data Vulnerability in ProConOS/ProConOS eCLR SDK and MULTIPROG Engineering tool

    CriticalCVSS 9.8No exploitEPSS 1%

    phoenixcontact · multiprogJun 21, 2022

  • CVE-2018-13992
    39Monitor

    The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 allows for plaintext transmission (HTTP) of user credentials by

    CriticalCVSS 9.8No exploitEPSS 1%

    phoenixcontact · fl switch 3005 firmwareMay 7, 2019

  • CVE-2023-0757
    39Monitor

    Phoenix Contact ProConOS prone to Incorrect Permission Assignment for Critical Resource

    CriticalCVSS 9.8No exploitEPSS 0%

    phoenixcontact · multiprogDec 14, 2023

  • CVE-2023-46141
    39Monitor

    Phoenix Contact: Automation Worx and classic line controllers prone to Incorrect Permission Assignment for Critical Resource

    CriticalCVSS 9.8No exploitEPSS 0%

    phoenixcontact · automationworx software suiteDec 14, 2023

  • CVE-2024-26001
    39Monitor

    PHOENIX CONTACT: Out of bounds write only memory access

    CriticalCVSS 9.8No exploitEPSS 0%

    phoenixcontact · charx sec-3000 firmwareMar 12, 2024

  • CVE-2020-12519
    39Monitor

    Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS: An attacker can use this vulnerability i.e. to open a reverse shell with root privileges.

    CriticalCVSS 9.8No exploitEPSS 0%

    phoenixcontact · plcnext firmwareDec 17, 2020

  • CVE-2025-25270
    39Monitor

    Remote Code Execution via Unauthenticated Configuration Manipulation

    CriticalCVSS 9.8No exploitEPSS 0%

    phoenixcontact · charx sec-3000 firmwareJul 8, 2025

  • CVE-2024-6788
    39Monitor

    Phoenix Contact: update feature from CHARX controller can be used to reset a low privilege user password

    CriticalCVSS 9.8No exploitEPSS 0%

    phoenixcontact · charx sec-3000 firmwareAug 13, 2024

  • CVE-2024-25996
    39Monitor

    PHOENIX CONTACT: Remote code execution due to an origin validation error in CHARX Series

    CriticalCVSS 9.8No exploitEPSS 0%

    phoenixcontact · charx sec-3000 firmwareMar 12, 2024

  • CVE-2020-8768
    38Monitor

    An issue was discovered on Phoenix Contact Emalytics Controller ILC 2050 BI before 1.2.3 and BI-L before 1.2.3 devices.

    CriticalCVSS 9.4No exploitEPSS 1%

    phoenixcontact · ilc 2050 bi firmwareFeb 17, 2020

  • CVE-2018-10730
    37Monitor

    All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to OS command injection.

    CriticalCVSS 9.1No exploitEPSS 4%

    phoenixcontact · fl switch 3005 firmwareMay 17, 2018

  • CVE-2017-10102
    37Monitor

    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI).

    CriticalCVSS 9.0No exploitEPSS 2%

    oracle · jdkAug 8, 2017

  • CVE-2018-10731
    37Monitor

    All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to buffer overflows when hand

    CriticalCVSS 9.0No exploitEPSS 2%

    phoenixcontact · fl switch 3005 firmwareMay 17, 2018

  • CVE-2019-12869
    36Monitor

    An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86.

    HighCVSS 8.8No exploitEPSS 3%

    phoenixcontact · automationworx software suiteJun 24, 2019

  • CVE-2019-12870
    36Monitor

    An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86.

    HighCVSS 8.8No exploitEPSS 3%

    phoenixcontact · automationworx software suiteJun 24, 2019