Advisories

Für CVSS 2.0, 3.0 und 3.2
VDE-2024-070
Mai 14, 2025, 3:00 nachm.

Phoenix Contact: Security Advisory for CHARX-SEC3xxx Charge controllers

Improper file permission handling allows an authenticated low privileged user to gain root access.
CVE-2024-11497
VDE-2025-005
Mai 14, 2025, 3:00 nachm.

Phoenix Contact: Security Advisory for ESL Stick USB-A

A vulnerability has been found in a cryptographic library of Infineon Technologies that is part of the firmware of the CmDongles. The exploitation of this vulnerability has been classified as …
CVE-2024-45678
VDE-2024-073
Mai 22, 2025, 3:03 nachm.

Phoenix Contact: Multiple Vulnerabilities in PLCnext Firmware

Multiple Linux component vulnerabilities fixed in latest PLCnext Firmware release 2024.0.6 LTS
CVE-2023-38545
CVE-2023-47100
CVE-2023-45853
CVE-2021-41072
CVE-2023-4911
CVE-2023-4751
CVE-2023-4752
CVE-2023-4738
CVE-2023-4750
CVE-2023-4736
CVE-2023-4734
CVE-2023-4781
CVE-2023-5535
CVE-2023-4807
CVE-2023-2603
CVE-2023-5363
CVE-2023-44487
CVE-2023-4785
CVE-2023-33953
CVE-2024-0567
CVE-2024-0553
CVE-2023-5156
CVE-2023-38039
CVE-2023-32731
CVE-2023-4733
CVE-2023-42465
CVE-2023-51385
CVE-2022-29900
CVE-2022-42012
CVE-2022-42011
CVE-2022-42010
CVE-2023-34969
CVE-2023-46218
CVE-2023-26555
CVE-2023-5441
CVE-2023-48795
CVE-2022-40897
CVE-2022-29901
CVE-2023-26554
CVE-2023-26553
CVE-2023-26552
CVE-2023-26551
CVE-2023-7104
CVE-2023-51384
CVE-2023-32665
CVE-2023-32611
CVE-2023-29499
CVE-2022-48554
CVE-2023-40217
CVE-2023-3817
CVE-2023-32732
CVE-2023-32643
CVE-2023-46219
CVE-2023-4735
CVE-2023-6004
CVE-2023-32636
CVE-2023-46246
CVE-2023-5344
CVE-2023-48231
CVE-2023-38546
CVE-2023-48706
CVE-2023-48237
CVE-2023-4016
VDE-2024-071
Mai 22, 2025, 3:03 nachm.

Phoenix Contact: Multiple Vulnerabilities in PLCnext Firmware

Multiple Linux component vulnerabilities fixed in latest PLCnext Firmware release 2024.0.6 LTS
CVE-2024-32002
CVE-2024-6387
CVE-2024-39894
CVE-2024-2511
CVE-2024-4741
CVE-2024-4603
VDE-2024-067
Mai 14, 2025, 3:00 nachm.

Phoenix Contact: Multiple Vulnerabilities in PLCnext Engineer

Vulnerabilities in .NET and Visual Studio functions System.Text.Json, System.Formats.Asn1, OPCFoundation.NetStandard.Opc.Ua.Core allow an remote attacker to execute a Denial-of-Servce attack.
CVE-2024-38095
CVE-2024-33862
CVE-2024-30105
VDE-2024-051
Mai 14, 2025, 3:00 nachm.

Phoenix Contact: Multiple mGuard devices are vulnerable to a remote code injection due to SSH

mGuards use an OpenSSH server for SSH access. This server is vulnerable to a remote code injection.
CVE-2024-6387
VDE-2024-039
Aug. 27, 2025, 12:00 nachm.

Phoenix Contact: Multiple Vulnerabilities in mGuard devices

Confidential data in HTTP query string of user requests. Incomplete sanitation of user input in administrative web interface.
CVE-2024-43388
CVE-2024-43387
CVE-2024-43386
CVE-2024-43385
CVE-2024-7699
CVE-2024-43384
CVE-2024-43393
CVE-2024-43392
CVE-2024-43391
CVE-2024-43390
CVE-2024-43389
CVE-2024-7698
VDE-2024-052
Mai 14, 2025, 3:00 nachm.

Phoenix Contact: Multiple mGuard devices are vulnerable to a drain of open file descriptors.

The pathfinder TCP encapsulation service is vulnerable to a drain of open file descriptors.
CVE-2024-7734