Vulnerabilidades em PHOENIX CONTACT

190 resultados
Análise Vexday

Com 73 CVEs catalogadas, os produtos PHOENIX CONTACT apresentam taxa de exploração ativa abaixo da média geral do catálogo, sem registros no CISA KEV. Ainda assim, 9 vulnerabilidades de severidade crítica merecem atenção prioritária, especialmente considerando que o tipo de falha mais recorrente é CWE-78 (injeção de comandos no sistema operacional), categoria historicamente associada a impactos severos em ambientes industriais e de automação. A CVE mais perigosa atualmente identificada é CVE-2023-3526, com escore EPSS de 0,0158, indicando probabilidade de exploração baixa porém não desprezível. A presença de PoC pública para ao menos uma vulnerabilidade reforça a necessidade de monitoramento contínuo, mesmo na ausência de exploração ativa confirmada.

CVE-2024-25994MEDIUMPHOENIX CONTACT: Unintended script file upload in CHARX SeriesEPSS 0.7%CVE-2021-33540HIGHPhoenix Contact: Undocumented FTP acces in certain AXL F BK and IL BK devicesEPSS 0.7%CVE-2026-27557HIGHPath Traversal in /index.php/view_uploaded_iodd_fileEPSS 0.7%CVE-2024-25997MEDIUMPHOENIX CONTACT: Log injection in CHARX SeriesEPSS 0.7%CVE-2021-21005HIGHRace Condition Vulnerability in Phoenix Contact FL SWITCH SMCS series productsEPSS 0.7%CVE-2025-41695HIGHReflected XSS vulnerability in dyn_conn.phpEPSS 0.7%CVE-2021-34597HIGHPhoenix Contact: PC Worx/-Express prone to improper input validation vulnerabilityEPSS 0.7%CVE-2025-25270CRITICALRemote Code Execution via Unauthenticated Configuration ManipulationEPSS 0.7%CVE-2025-41749HIGHReflected XSS vulnerability in port_util.phpEPSS 0.7%CVE-2025-41745HIGHReflected XSS vulnerability in pxc_portCntr2.phpEPSS 0.7%CVE-2025-41769CRITICALUnauthenticated Buffer Overflow in PROFINET ServiceEPSS 0.6%CVE-2022-29898CRITICALRemote Code Execution in all versions of various RAD-ISM-900-EN-* devices by PHOENIX CONTACTEPSS 0.6%CVE-2024-26005MEDIUMPHOENIX CONTACT: Privilege gain through incomplete cleanup in CHARX SeriesEPSS 0.6%CVE-2023-2673MEDIUMPHOENIX CONTACT: FL/TC MGUARD prone to Improper Input ValidationEPSS 0.6%CVE-2021-34579HIGHPHOENIX CONTACT: FL MGUARD DM version 1.12.0 and 1.13.0 Improper Privilege ManagementEPSS 0.6%CVE-2025-2813HIGHHTTP Service DoS VulnerabilityEPSS 0.6%CVE-2023-3571HIGHPHOENIX CONTACT: OS Command Injection in WP 6xxx Web panelsEPSS 0.6%CVE-2023-37857LOWPHOENIX CONTACT: Use of Hard-coded Credentials in WP 6xxx Web panelsEPSS 0.6%CVE-2021-21004HIGHCross-site Scripting Vulnerability in Phoenix Contact FL SWITCH SMCS series productsEPSS 0.6%CVE-2021-34562MEDIUMA vulnerability in WirelessHART-Gateway 3.0.8 it is possible to inject arbitrary JavaScript into the application's responseEPSS 0.6%