CVE-2019-12871 - CVE House
Back to Database
Status published High CVE-2019-12871

An issue was discovered in PHOENIX CONTACT PC Worx through...

Vulnerability Description

An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86. A manipulated PC Worx or Config+ project file could lead to a Use-After-Free and remote code execution. The attacker needs to get access to an original PC Worx or Config+ project file to be able to manipulate it. After manipulation, the attacker needs to exchange the original file with the manipulated one on the application programming workstation.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-12871

Credits & Attribution

No credits recorded in the NVD database.

References

More from phoenixcontact

View All →
CVE-2022-22509
PHOENIX CONTACT: FL SWITCH 2xxx series incorrect privilege assignment
High 8.8
CVE-2020-9436
PHOENIX CONTACT TC ROUTER 3002T-4G through 2.05.3, TC ROUTER 2002T-3G...
High 8.8
CVE-2020-9435
PHOENIX CONTACT TC ROUTER 3002T-4G through 2.05.3, TC ROUTER 2002T-3G...
High 7.5
CVE-2020-8768
An issue was discovered on Phoenix Contact Emalytics Controller ILC...
Critical 9.4
CVE-2020-10940
Local Privilege Escalation can occur in PHOENIX CONTACT PORTICO SERVER...
High 7.8

Affected Vendor

phoenixcontact

View all reports →

Affected Software

automationworx software suite
Vulnerable Versions:
0

Timeline

Official Publish: June 24th, 2019
Last Modified: August 4th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.