Phoenixcontact vulnerabilitiesNone on the known-exploited list.

Vendor
The short answer

Phoenixcontact has 132 published vulnerabilities across 701 products in our catalogue. None of them is on the list of flaws known to be exploited today. The most affected product is Charx Sec-3150 Firmware, with 20. If you run Phoenixcontact software, patch the exploited flaws first.

See the exploited flaws

We keep watching the known-exploited list.

Products

Which Phoenixcontact products have the most vulnerabilities?

Charx Sec-3150 Firmware leads with 20 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.

Known exploited

Which Phoenixcontact vulnerabilities are being exploited?

This is the list that matters most: flaws criminals are using now.

None of Phoenixcontact's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.

Exploit likelihood

Which Phoenixcontact flaws are most likely to be used?

Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.

50% or more10% to 49%Under 10%
  1. 94%

    Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.

    CVSS5.6Published4 Jan 2018
  2. 15%

    PLCopen XML file parsing in Phoenix Contact PC Worx and PC Worx Express version 1.87 and earlier can lead to a stack-based overflow.

    CVSS7.8Published1 Jul 2020
  3. 11%

    The web server in Phoenix Contact ILC PLCs can be accessed without authenticating even if the authentication mechanism is enabled.

    CVSS7.3Published5 Apr 2018
  4. 11%

    The web server in Phoenix Contact ILC PLCs allows access to read and write PLC variables without authentication.

    CVSS7.3Published5 Apr 2018
  5. 5.7%

    Webvisit in Phoenix Contact ILC PLCs offers a password macro to protect HMI pages on the PLC against casual or coincidental opening of HMI pages by the user.

    CVSS7.3Published5 Apr 2018
  6. 5.0%

    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security).

    CVSS7.5Published8 Aug 2017
  7. 4.5%

    All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to OS command injection.

    CVSS9.1Published17 May 2018
  8. 3.8%

    An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86.

    CVSS8.8Published24 Jun 2019
  9. 3.7%

    An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86.

    CVSS8.8Published24 Jun 2019
  10. 3.7%

    An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86.

    CVSS8.8Published24 Jun 2019
Every product

All Phoenixcontact products we track.

240 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.

This directory lists the 240 Phoenixcontact products with at least one tracked version, of 701 in our catalogue.

Precursor Intelligence

Running Phoenixcontact? We'll keep checking.

Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.

  1. Tell us what you runPick your software from a list, or let us work it out from your website.
  2. We match it to every flawOver 400,000 published flaws, checked against your list.
  3. Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
  4. Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.

Free plan, no card needed. Nothing to install.

FAQ

Common questions, answered plainly.

Something else? Talk to the team →

Our catalogue lists 132 published vulnerabilities across 701 products and 745 versions from Phoenixcontact.

None of Phoenixcontact's vulnerabilities is on the list of flaws known to be exploited today.

Charx Sec-3150 Firmware, with 20 published vulnerabilities. Its own page lists the ones known to be exploited.

Create a Precursor Intelligence account and track the Phoenixcontact products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.