Vulnerabilities in PHOENIX CONTACT

167 results
Vexday analysis

Com 73 CVEs catalogadas, os produtos PHOENIX CONTACT apresentam taxa de exploração ativa abaixo da média geral do catálogo, sem registros no CISA KEV. Ainda assim, 9 vulnerabilidades de severidade crítica merecem atenção prioritária, especialmente considerando que o tipo de falha mais recorrente é CWE-78 (injeção de comandos no sistema operacional), categoria historicamente associada a impactos severos em ambientes industriais e de automação. A CVE mais perigosa atualmente identificada é CVE-2023-3526, com escore EPSS de 0,0158, indicando probabilidade de exploração baixa porém não desprezível. A presença de PoC pública para ao menos uma vulnerabilidade reforça a necessidade de monitoramento contínuo, mesmo na ausência de exploração ativa confirmada.

CVE-2024-25994MEDIUMPHOENIX CONTACT: Unintended script file upload in CHARX SeriesEPSS 0.7%CVE-2021-33540HIGHPhoenix Contact: Undocumented FTP acces in certain AXL F BK and IL BK devicesEPSS 0.7%CVE-2023-37863HIGHPHOENIX CONTACT: OS Command Injection in WP 6xxx Web panelsEPSS 0.7%CVE-2024-25997MEDIUMPHOENIX CONTACT: Log injection in CHARX SeriesEPSS 0.7%CVE-2021-21005HIGHRace Condition Vulnerability in Phoenix Contact FL SWITCH SMCS series productsEPSS 0.7%CVE-2023-37859HIGHPHOENIX CONTACT: Improper Privilege Management in WP 6xxx Web panelsEPSS 0.6%CVE-2021-34597HIGHPhoenix Contact: PC Worx/-Express prone to improper input validation vulnerabilityEPSS 0.6%CVE-2025-25270CRITICALRemote Code Execution via Unauthenticated Configuration ManipulationEPSS 0.6%CVE-2024-26005MEDIUMPHOENIX CONTACT: Privilege gain through incomplete cleanup in CHARX SeriesEPSS 0.6%CVE-2023-2673MEDIUMPHOENIX CONTACT: FL/TC MGUARD prone to Improper Input ValidationEPSS 0.6%CVE-2022-29898CRITICALRemote Code Execution in all versions of various RAD-ISM-900-EN-* devices by PHOENIX CONTACTEPSS 0.6%CVE-2023-37860HIGHPHOENIX CONTACT: Missing Authorization in WP 6xxx Web panelsEPSS 0.6%CVE-2025-2813HIGHHTTP Service DoS VulnerabilityEPSS 0.6%CVE-2025-41695HIGHReflected XSS vulnerability in dyn_conn.phpEPSS 0.6%CVE-2025-41745HIGHReflected XSS vulnerability in pxc_portCntr2.phpEPSS 0.6%CVE-2025-41749HIGHReflected XSS vulnerability in port_util.phpEPSS 0.6%CVE-2021-21004HIGHCross-site Scripting Vulnerability in Phoenix Contact FL SWITCH SMCS series productsEPSS 0.6%CVE-2021-34562MEDIUMA vulnerability in WirelessHART-Gateway 3.0.8 it is possible to inject arbitrary JavaScript into the application's responseEPSS 0.6%CVE-2021-34579HIGHPHOENIX CONTACT: FL MGUARD DM version 1.12.0 and 1.13.0 Improper Privilege ManagementEPSS 0.6%CVE-2024-43387HIGHPhoenix Contact: Access files due to improper neutralization of special elements in MGUARD devicesEPSS 0.6%