CVE-2022-3737

7.8 highEPSS 0.2%

High (7.8) in phoenixcontact automationworx software suite. EPSS 0.2% chance of exploitation in the next 30 days.

In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 memory can be read beyond the intended scope due to insufficient validation of input data. Availability, integrity, or confidentiality of an application programming workstation might be compromised by attacks using these vulnerabilities.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 11% of CVEs (scores of 2026-10-31)
CWE: CWE-125
Published: 2022-11-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

phoenixcontact:automationworx_software_suite

References

https://cert.vde.com/en/advisories/VDE-2022-048/
https://cert.vde.com/en/advisories/VDE-2022-048/

Check your stack JSON