VulnerabilityModified
CVE-2022-3737
Availability, integrity, or confidentiality of an application programming workstation might be compromised by attacks using these vulnerabilities.
HIGH 7.8EPSS 0.21%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.21%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 memory can be read beyond the intended scope due to insufficient validation of input data. Availability, integrity, or confidentiality of an application programming workstation might be compromised by attacks using these vulnerabilities.
- CVSS 3.1
- 7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- EPSS
- 0.21% probability · 11th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-125
- Affected
- phoenixcontact/automationworx software suite
- Source
- info@cert.vde.com
References
- https://cert.vde.com/en/advisories/VDE-2022-048/Third Party Advisory
- https://cert.vde.com/en/advisories/VDE-2022-048/Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.