title: Out-of-bounds Read in PHOENIX CONTACT Automationworx Software Suite
description: In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 memory can be read beyond the intended scope due to insufficient validation of input data. Availability, integrity, or confidentiality of an application programming workstation might be compromised by attacks using these vulnerabilities.
problem types: CWE-125 Out-of-bounds Read
affected:
{
defaultStatus: unaffected
product: Config+
vendor: PHOENIX CONTACT
versions:
lessThanOrEqual: 1.89, status: affected, version: 0, versionType: semver
}
{
defaultStatus: unaffected
product: PC Worx
vendor: PHOENIX CONTACT
versions:
lessThanOrEqual: 1.89, status: affected, version: 0, versionType: semver
}
{
defaultStatus: unaffected
product: PC Worx Express
vendor: PHOENIX CONTACT
versions:
lessThanOrEqual: 1.89, status: affected, version: 0, versionType: semver
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
version: 3.1
]
format: CVSS
scenarios: GENERAL
solutions: Upgrade to Automation Worx Software Suite > 1.89