İçeriğe atla
Noroxi

phoenixcontact kayıtları

phoenixcontact üreticisine ait 156 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
10
Düzeltme kaydı olan
%40,4
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25
  10. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

156 kayıt
  • CVE-2017-5753
    50Planlayın

    Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an at

    OrtaCVSS 5,6Kavram kanıtıEPSS %94

    intel · atom c4 Oca 2018

  • CVE-2017-16743
    40Planlayın

    An Improper Authorization issue was discovered in PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, and 48xxx Series products running firmware Version 1

    KritikCVSS 9,8İstismar yokEPSS %3

    phoenixcontact · fl switch 3005 firmware12 Oca 2018

  • CVE-2019-9201
    40Planlayın

    Multiple Phoenix Contact devices allow remote attackers to establish TCP sessions to port 1962 and obtain sensitive information or make chan

    KritikCVSS 9,8İstismar yokEPSS %3

    phoenixcontact · ilc 131 eth firmware26 Şub 2019

  • CVE-2017-5159
    40Planlayın

    An issue was discovered on Phoenix Contact mGuard devices that have been updated to Version 8.4.0.

    KritikCVSS 9,8İstismar yokEPSS %2

    phoenixcontact · mguard firmware13 Şub 2017

  • CVE-2018-13990
    40Planlayın

    The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions prior to 1.35 is vulnerable to brute-force attacks, because of Improper Res

    KritikCVSS 9,8İstismar yokEPSS %2

    phoenixcontact · fl switch 3005 firmware6 May 2019

  • CVE-2023-3935
    40Planlayın

    Wibu: Buffer Overflow in CodeMeter Runtime

    KritikCVSS 9,8İstismar yokEPSS %2

    wibu · codemeter runtime13 Eyl 2023

  • CVE-2023-3572
    40Planlayın

    PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels

    KritikCVSS 10,0İstismar yokEPSS %1

    phoenixcontact · wp 6070-wvps firmware8 Ağu 2023

  • CVE-2023-3526
    39İzleyin

    PHOENIX CONTACT: Cross-site Scripting vulnerability in TC ROUTER, TC CLOUD CLIENT and CLOUD CLIENT devices

    KritikCVSS 9,6İstismar yokEPSS %2

    phoenixcontact · cloud client 1101t-tx firmware8 Ağu 2023

  • CVE-2022-31800
    39İzleyin

    Insufficient Verification of Data Vulnerability in PHOENIX CONTACT classic line industrial controllers

    KritikCVSS 9,8İstismar yokEPSS %2

    phoenixcontact · axc 1050 firmware21 Haz 2022

  • CVE-2024-25995
    39İzleyin

    PHOENIX CONTACT: Remote code execution in CHARX Series

    KritikCVSS 9,8İstismar yokEPSS %1

    phoenixcontact · charx sec-3000 firmware12 Mar 2024

  • CVE-2022-31801
    39İzleyin

    Insufficient Verification of Data Vulnerability in ProConOS/ProConOS eCLR SDK and MULTIPROG Engineering tool

    KritikCVSS 9,8İstismar yokEPSS %1

    phoenixcontact · multiprog21 Haz 2022

  • CVE-2018-13992
    39İzleyin

    The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 allows for plaintext transmission (HTTP) of user credentials by

    KritikCVSS 9,8İstismar yokEPSS %1

    phoenixcontact · fl switch 3005 firmware7 May 2019

  • CVE-2023-0757
    39İzleyin

    Phoenix Contact ProConOS prone to Incorrect Permission Assignment for Critical Resource

    KritikCVSS 9,8İstismar yokEPSS %1

    phoenixcontact · multiprog14 Ara 2023

  • CVE-2023-46141
    39İzleyin

    Phoenix Contact: Automation Worx and classic line controllers prone to Incorrect Permission Assignment for Critical Resource

    KritikCVSS 9,8İstismar yokEPSS %1

    phoenixcontact · automationworx software suite14 Ara 2023

  • CVE-2024-26001
    39İzleyin

    PHOENIX CONTACT: Out of bounds write only memory access

    KritikCVSS 9,8İstismar yokEPSS %1

    phoenixcontact · charx sec-3000 firmware12 Mar 2024

  • CVE-2020-12519
    39İzleyin

    Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS: An attacker can use this vulnerability i.e. to open a reverse shell with root privileges.

    KritikCVSS 9,8İstismar yokEPSS %1

    phoenixcontact · plcnext firmware17 Ara 2020

  • CVE-2025-25270
    39İzleyin

    Remote Code Execution via Unauthenticated Configuration Manipulation

    KritikCVSS 9,8İstismar yokEPSS %1

    phoenixcontact · charx sec-3000 firmware8 Tem 2025

  • CVE-2024-6788
    39İzleyin

    Phoenix Contact: update feature from CHARX controller can be used to reset a low privilege user password

    KritikCVSS 9,8İstismar yokEPSS %1

    phoenixcontact · charx sec-3000 firmware13 Ağu 2024

  • CVE-2024-25996
    39İzleyin

    PHOENIX CONTACT: Remote code execution due to an origin validation error in CHARX Series

    KritikCVSS 9,8İstismar yokEPSS %0

    phoenixcontact · charx sec-3000 firmware12 Mar 2024

  • CVE-2020-8768
    38İzleyin

    An issue was discovered on Phoenix Contact Emalytics Controller ILC 2050 BI before 1.2.3 and BI-L before 1.2.3 devices.

    KritikCVSS 9,4İstismar yokEPSS %2

    phoenixcontact · ilc 2050 bi firmware17 Şub 2020

  • CVE-2018-10730
    37İzleyin

    All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to OS command injection.

    KritikCVSS 9,1İstismar yokEPSS %5

    phoenixcontact · fl switch 3005 firmware17 May 2018

  • CVE-2017-10102
    37İzleyin

    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI).

    KritikCVSS 9,0İstismar yokEPSS %3

    oracle · jdk8 Ağu 2017

  • CVE-2018-10731
    37İzleyin

    All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to buffer overflows when hand

    KritikCVSS 9,0İstismar yokEPSS %3

    phoenixcontact · fl switch 3005 firmware17 May 2018

  • CVE-2019-12869
    36İzleyin

    An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86.

    YüksekCVSS 8,8İstismar yokEPSS %4

    phoenixcontact · automationworx software suite24 Haz 2019

  • CVE-2019-12870
    36İzleyin

    An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86.

    YüksekCVSS 8,8İstismar yokEPSS %4

    phoenixcontact · automationworx software suite24 Haz 2019