Threats tagged 'phoenix-contact-gmbh-co-kg'

Multiple security vulnerabilities in Phoenix Contact's CodeMeter Runtime license validation allow unauthenticated attackers to delete arbitrary files, read and overwrite sensitive configuration data, and crash the runtime. These issues affect version 1.8.2 on Windows, Linux, and Mac systems running Phoenix Contact software tools.

Multiple vulnerabilities affect Phoenix Contact's software version 2026.6, including a signature verification bypass in GSDX, a plugin deployment signature bypass, and a path traversal vulnerability during plugin deployment. These flaws allow tampered device descriptions to be accepted as valid, arbitrary code execution via unsigned plugin components, and writing files outside intended directories with user permissions.

The device's PROFINET service is affected by a buffer overflow vulnerability that exists in the default configuration. An unauthenticated remote attacker could exploit this vulnerability to reboot the device or execute arbitrary code.