CVE-2021-34597 — Phoenix Contact: PC Worx/-Express prone to improper input validation vulnerability
Improper Input Validation vulnerability in PC Worx Automation Suite of Phoenix Contact up to version 1.88 could allow an attacker with a manipulated project file to unpack arbit…
Published: 2021-11-04 · CVSS: 7.8 · CVSS 3.1
Improper Input Validation vulnerability in PC Worx Automation Suite of Phoenix Contact up to version 1.88 could allow an attacker with a manipulated project file to unpack arbitrary files outside of the selected project directory.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7