Phoenixcontact vulnerabilities
We track 45 vulnerabilities in Phoenixcontact products across 60+ products. 45 are rated high or critical, and none are known to be exploited. The most recent was published on July 8, 2025.
Latest Phoenixcontact vulnerabilities
- 7.8 High severity
Config+: Improper Restriction of Operations within the Bounds of a Memory Buffer
In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 manipulated PC Worx or Config+ files could lead to a heap buffer overflow and a read access violation. Availability, integrity, or confidentiality of an application programming workstation mig
- 10.0 High severity
ILC 1x0: Insufficient Verification of Data Authenticity
An unauthenticated, remote attacker could upload malicious logic to devices based on ProConOS/ProConOS eCLR in order to gain full control over the device.
- 9.0 High severity
RAD-ISM-900-EN-BD/B: Improper Validation of Integrity Check Value
On various RAD-ISM-900-EN-* devices by PHOENIX CONTACT an admin user could use the configuration file uploader in the WebUI to execute arbitrary code with root privileges on the OS due to an improper validation of an integrity check value in all versions of th
- 9.0 High severity
On various RAD-ISM-900-EN-* devices by PHOENIX CONTACT an admin user could use the traceroute…
On various RAD-ISM-900-EN-* devices by PHOENIX CONTACT an admin user could use the traceroute utility integrated in the WebUI to execute arbitrary code with root privileges on the OS due to an improper input validation in all versions of the firmware.
- 8.8 High severity
Fl Switch 2005 Firmware: Improper Privilege Management
In Phoenix Contact FL SWITCH Series 2xxx in version 3.00 an incorrect privilege assignment allows an low privileged user to enable full access to the device configuration.