https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:29:24.973803+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-235497 EUVD-2026-235497 2026-10-02T19:29:25.006180+00:00 EUVD-2026-235497 https://cve.radiocsirt.org/vuln/fkie_cve-2022-3737 fkie_cve-2022-3737 2026-10-02T19:29:25.006218+00:00

In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 memory can be read beyond the intended scope due to insufficient validation of input data. Availability, integrity, or confidentiality of an application programming workstation might be compromised by attacks using these vulnerabilities.

 https://cve.radiocsirt.org/vuln/ghsa-r2cg-cw4r-gcx4 GHSA-r2cg-cw4r-gcx4 2026-10-02T19:29:25.006251+00:00

In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 memory can be read beyond the intended scope due to insufficient validation of input data. Availability, integrity, or confidentiality of an application programming workstation might be compromised by attacks using these vulnerabilities.

 https://cve.radiocsirt.org/vuln/gsd-2022-3737 gsd-2022-3737 2026-10-02T19:29:25.006270+00:00 gsd-2022-3737 https://cve.radiocsirt.org/vuln/icsa-22-326-03 ICSA-22-326-03 — Phoenix Contact Automation Worx 2026-10-02T19:29:25.006282+00:00

In Phoenix Contact Automation Worx Software Suite up to version 1.89, manipulated PC Worx or Config+ files could lead to a heap buffer overflow or a read access violation. Availability, integrity, or confidentiality of an application programming workstation could be compromised by attacks using these vulnerabilities.CVE-2022-3461 has been assigned to this vulnerability. A CVSS v3 base score of 7.8 has been assigned; the CVSS vector string is (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). In Phoenix Contact Automation Worx Software Suite up to version 1.89, unauthorized users could read memory beyond the intended scope due to insufficient validation of input data. Availability, integrity, or confidentiality of an application programming workstation could be compromised by attacks using these vulnerabilities.CVE-2022-3737 has been assigned to this vulnerability. A CVSS v3 base score of 7.8 has been assigned; the CVSS vector string is (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H).

 https://cve.radiocsirt.org/vuln/vde-2022-048 VDE-2022-048 — PHOENIX CONTACT: Automationworx BCP File Parsing Vulnerabilities 2026-10-02T19:29:25.006309+00:00

Manipulated PC Worx or Config+ files could lead to a heap buffer overflow, release of unallocated memory or a read access violation due to insufficient validation of input data.The attacker needs to get access to an original bus configuration file (*.bcp) to be able to manipulate data inside. After manipulation the attacker needs to exchange the original file by the manipulated one on the application programming workstation.

Update A, 2022-11-14

removed the sentence "Automated systems in operation which were programmed with one of the above-mentioned products are not affected." from Impact.