November 20, 2023
Severity Medium Analysis Summary Agent Tesla is a very popular spyware Trojan built for the.NET framework. Since its initial appearance in 2014, this has been deployed […]
Rewterz Threat Alert – Recent Lazarus activity – IOC’s
October 29, 2019Rewterz Threat Alert – How TrickBot is Injected into Browsers
October 30, 2019Rewterz Threat Alert – Recent Lazarus activity – IOC’s
October 29, 2019Rewterz Threat Alert – How TrickBot is Injected into Browsers
October 30, 2019
Severity
Medium
Analysis Summary
A manipulated PC Worx or Config+ project file could lead to arbitrary code execution due to insufficient input data validation.
Impact
Improper Input Validation
Affected Vendors
Phoenix Contact
Affected Products
- PC Worx Versions 1.86 and prior
- PC Worx Express Versions 1.86 and prior
- Config+ Versions 1.86 and prior
Remediation
Phoenix Contact strongly recommends users exchange project files using only secure file exchange services, and that project files should not be exchanged via unencrypted email.