en
Phoenix Contact is a global, family-owned industrial technology company that develops and manufactures products and systems for electrification, industrial networking, automation, and power and data management. Its solutions are used by industrial, infrastructure, energy, and device-engineering organizations, with worldwide production and sales operations.
As of 11/08/2026, Phoenix Contact recorded 26 security vulnerabilities in the last 90 days across 20 products, including 23 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, IOL MA8 EIP DI8 had the most security vulnerabilities in the Phoenix Contact ecosystem, with 20 vulnerabilities—approximately 76.92% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2024-43392Phoenix Contact: Firewall reconfiguration through the FW_environment variables in MGUARD devicesCVE-2024-43391Phoenix Contact: Firewall reconfiguration through the FW_PORTFORWARDING.SRC_IP in MGUARD devicesCVE-2024-43390Phoenix Contact: Firewall reconfiguration due to improper input validation in MGUARD devicesCVE-2024-43389Phoenix Contact: OSPF reconfiguration due to improper input validation in MGUARD devicesCVE-2024-43388Phoenix Contact: SNMP reconfiguration due to improper input validation in MGUARD devices| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2024-43392Phoenix Contact: Firewall reconfiguration through the FW_environment variables in MGUARD devices | Exploitation statusNot exploited | FixYes |
| Affected productFL MGUARD 2102 |
| Published09/10/2024 |
| SeverityHigh |
CVE-2024-43391Phoenix Contact: Firewall reconfiguration through the FW_PORTFORWARDING.SRC_IP in MGUARD devices | Exploitation statusNot exploited | FixYes | Affected productFL MGUARD 2102 | Published09/10/2024 | SeverityHigh |
|---|
CVE-2024-43390Phoenix Contact: Firewall reconfiguration due to improper input validation in MGUARD devices | Exploitation statusNot exploited | FixYes | Affected productFL MGUARD 2102 | Published09/10/2024 | SeverityHigh |
|---|
CVE-2024-43389Phoenix Contact: OSPF reconfiguration due to improper input validation in MGUARD devices | Exploitation statusNot exploited | FixYes | Affected productFL MGUARD 2102 | Published09/10/2024 | SeverityHigh |
|---|
CVE-2024-43388Phoenix Contact: SNMP reconfiguration due to improper input validation in MGUARD devices | Exploitation statusNot exploited | FixYes | Affected productFL MGUARD 2102 | Published09/10/2024 | SeverityHigh |
|---|
CVE-2024-43387Phoenix Contact: Access files due to improper neutralization of special elements in MGUARD devices | Exploitation statusNot exploited | FixYes | Affected productFL MGUARD 2102 | Published09/10/2024 | SeverityHigh |
|---|
CVE-2024-43386Phoenix Contact: OS command execution through EMAIL_NOTIFICATION.TO in mGuard devices. | Exploitation statusNot exploited | FixYes | Affected productFL MGUARD 2102 | Published09/10/2024 | SeverityHigh |
|---|
CVE-2024-43385Phoenix Contact: OS command execution through PROXY_HTTP_PORT in mGuard devices | Exploitation statusNot exploited | FixYes | Affected productFL MGUARD 2102 | Published09/10/2024 | SeverityHigh |
|---|
CVE-2024-6788Phoenix Contact: update feature from CHARX controller can be used to reset a low privilege user password | Exploitation statusNot exploited | FixYes | Affected productCHARX SEC-3000 | Published08/13/2024 | SeverityHigh |
|---|
CVE-2024-3913Phoenix Contact: Start sequence allows attack during the boot process | Exploitation statusNot exploited | FixYes | Affected productCHARX SEC-3000 (1139022) | Published08/13/2024 | SeverityMedium |
|---|
CVE-2024-28137PHOENIX CONTACT: privilege escalation due to a TOCTOU vulnerability in the CHARX Series | Exploitation statusNot exploited | FixYes | Affected productCHARX SEC-3000 | Published05/14/2024 | SeverityHigh |
|---|
CVE-2024-28136PHOENIX CONTACT: command injection gains root privileges using the OCPP remote service | Exploitation statusNot exploited | FixYes | Affected productCHARX SEC-3000 | Published05/14/2024 | SeverityHigh |
|---|
CVE-2024-28135PHOENIX CONTACT: command injection vulnerability in the API of the CHARX Series | Exploitation statusNot exploited | FixYes | Affected productCHARX SEC-3000 | Published05/14/2024 | SeverityMedium |
|---|
CVE-2024-28134PHOENIX CONTACT: MitM attack gains privileges of the current logged in user in CHARX Series | Exploitation statusNot exploited | FixYes | Affected productCHARX SEC-3000 | Published05/14/2024 | SeverityHigh |
|---|
CVE-2024-28133PHOENIX CONTACT: Privilege escalation in CHARX Series | Exploitation statusNot exploited | FixYes | Affected productCHARX SEC-3000 | Published05/14/2024 | SeverityHigh |
|---|
CVE-2024-26288PHOENIX CONTACT: Lack of SSL support in CHARX Series | Exploitation statusNot exploited | FixYes | Affected productCHARX SEC-3000 | Published03/12/2024 | SeverityHigh |
|---|
CVE-2024-26005PHOENIX CONTACT: Privilege gain through incomplete cleanup in CHARX Series | Exploitation statusNot exploited | FixYes | Affected productCHARX SEC-3000 | Published03/12/2024 | SeverityMedium |
|---|
CVE-2024-26004PHOENIX CONTACT: DoS of a control agent due to access of a uninitialized pointer in CHARX Series | Exploitation statusNot exploited | FixYes | Affected productCHARX SEC-3000 | Published03/12/2024 | SeverityHigh |
|---|
CVE-2024-26003PHOENIX CONTACT: DoS of the control agent in CHARX Series | Exploitation statusNot exploited | FixYes | Affected productCHARX SEC-3000 | Published03/12/2024 | SeverityHigh |
|---|
CVE-2024-26002PHOENIX CONTACT: File ownership manipulation in CHARX Series | Exploitation statusNot exploited | FixYes | Affected productCHARX SEC-3000 | Published03/12/2024 | SeverityHigh |
|---|
CVE-2024-26001PHOENIX CONTACT: Out of bounds write only memory access | Exploitation statusNot exploited | FixYes | Affected productCHARX SEC-3000 | Published03/12/2024 | SeverityHigh |
|---|
CVE-2024-26000PHOENIX CONTACT: Out of bounds read only memory access | Exploitation statusNot exploited | FixYes | Affected productCHARX SEC-3000 | Published03/12/2024 | SeverityMedium |
|---|
CVE-2024-25999PHOENIX CONTACT: Privilege escalation in the OCPP agent service | Exploitation statusNot exploited | FixYes | Affected productCHARX SEC-3000 | Published03/12/2024 | SeverityHigh |
|---|
CVE-2024-25998PHOENIX CONTACT: Command injection in the OCPP Service | Exploitation statusNot exploited | FixYes | Affected productCHARX SEC-3000 | Published03/12/2024 | SeverityHigh |
|---|
CVE-2024-25997PHOENIX CONTACT: Log injection in CHARX Series | Exploitation statusNot exploited | FixYes | Affected productCHARX SEC-3000 | Published03/12/2024 | SeverityMedium |
|---|
CVE-2024-25996PHOENIX CONTACT: Remote code execution due to an origin validation error in CHARX Series | Exploitation statusNot exploited | FixYes | Affected productCHARX SEC-3000 | Published03/12/2024 | SeverityMedium |
|---|
CVE-2024-25995PHOENIX CONTACT: Remote code execution in CHARX Series | Exploitation statusNot exploited | FixYes | Affected productCHARX SEC-3000 | Published03/12/2024 | SeverityCritical |
|---|
CVE-2024-25994PHOENIX CONTACT: Unintended script file upload in CHARX Series | Exploitation statusNot exploited | FixYes | Affected productCHARX SEC-3000 | Published03/12/2024 | SeverityMedium |
|---|
CVE-2023-5592Phoenix Contact: ProConOs prone to Download of Code Without Integrity Check | Exploitation statusNot confirmed | FixNo | Affected productMultiProg | Published12/14/2023 | SeverityHigh |
|---|
CVE-2023-46144PHOENIX CONTACT: PLCnext Control prone to download of code without integrity check | Exploitation statusNot confirmed | FixYes | Affected productAXC F 1152 | Published12/14/2023 | SeverityMedium |
|---|
CVE-2023-46143Phoenix Contact: Classic line industrial controllers prone to inadequate integrity check of PLC | Exploitation statusNot exploited | FixNo | Affected productAutomation Worx Software Suite | Published12/14/2023 | SeverityHigh |
|---|
CVE-2023-46142PHOENIX CONTACT: Insufficient Read and Write Protection to Logic and Runtime Data in PLCnext Control | Exploitation statusNot confirmed | FixYes | Affected productAXC F 1152 | Published12/14/2023 | SeverityHigh |
|---|
CVE-2023-46141Phoenix Contact: Automation Worx and classic line controllers prone to Incorrect Permission Assignment for Critical Resource | Exploitation statusNot confirmed | FixNo | Affected productAutomation Worx Software Suite | Published12/14/2023 | SeverityCritical |
|---|
CVE-2023-0757Phoenix Contact ProConOS prone to Incorrect Permission Assignment for Critical Resource | Exploitation statusNot confirmed | FixNo | Affected productMultiProg | Published12/14/2023 | SeverityCritical |
|---|
CVE-2023-37864PHOENIX CONTACT: WP 6xxx Web panels prone to download code without integrity check | Exploitation statusNot exploited | FixYes | Affected productWP 6070-WVPS | Published08/09/2023 | SeverityHigh |
|---|
CVE-2023-37863PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels | Exploitation statusNot exploited | FixYes | Affected productWP 6070-WVPS | Published08/09/2023 | SeverityHigh |
|---|
CVE-2023-37862PHOENIX CONTACT: Missing Authorization in WP 6xxx Web panels | Exploitation statusNot exploited | FixYes | Affected productWP 6070-WVPS | Published08/09/2023 | SeverityHigh |
|---|
CVE-2023-37861PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels | Exploitation statusNot exploited | FixYes | Affected productWP 6070-WVPS | Published08/09/2023 | SeverityHigh |
|---|
CVE-2023-37860PHOENIX CONTACT: Missing Authorization in WP 6xxx Web panels | Exploitation statusNot exploited | FixYes | Affected productWP 6070-WVPS | Published08/09/2023 | SeverityHigh |
|---|
CVE-2023-37859PHOENIX CONTACT: Improper Privilege Management in WP 6xxx Web panels | Exploitation statusNot confirmed | FixYes | Affected productWP 6070-WVPS | Published08/09/2023 | SeverityHigh |
|---|
CVE-2023-37858PHOENIX CONTACT: Use of Hard-coded Credentials in WP 6xxx Web panels | Exploitation statusNot confirmed | FixYes | Affected productWP 6070-WVPS | Published08/09/2023 | SeverityMedium |
|---|
CVE-2023-37857PHOENIX CONTACT: Use of Hard-coded Credentials in WP 6xxx Web panels | Exploitation statusNot exploited | FixYes | Affected productWP 6070-WVPS | Published08/09/2023 | SeverityLow |
|---|
CVE-2023-37856PHOENIX CONTACT: Unauthorized read-access of root filesystem in WP 6xxx Web panels | Exploitation statusNot exploited | FixYes | Affected productWP 6070-WVPS | Published08/09/2023 | SeverityMedium |
|---|
CVE-2023-37855PHOENIX CONTACT: Unauthorized read-access of root filesystem in WP 6xxx Web panels | Exploitation statusNot exploited | FixYes | Affected productWP 6070-WVPS | Published08/09/2023 | SeverityMedium |
|---|
CVE-2023-3573PHOENIX CONTACT: Command Injection in WP 6xxx Web panels | Exploitation statusNot exploited | FixYes | Affected productWP 6070-WVPS | Published08/08/2023 | SeverityHigh |
|---|
CVE-2023-3572PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels | Exploitation statusNot exploited | FixYes | Affected productWP 6070-WVPS | Published08/08/2023 | SeverityCritical |
|---|
CVE-2023-3571PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels | Exploitation statusNot exploited | FixYes | Affected productWP 6070-WVPS | Published08/08/2023 | SeverityHigh |
|---|
CVE-2023-3570PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels | Exploitation statusNot exploited | FixYes | Affected productWP 6070-WVPS | Published08/08/2023 | SeverityHigh |
|---|
CVE-2023-3569PHOENIX CONTACT: Denial-of-Service due to malicious XML files in TC ROUTER, TC CLOUD CLIENT and CLOUD CLIENT | Exploitation statusNot exploited | FixYes | Affected productCLOUD CLIENT 1101T-TX/TX | Published08/08/2023 | SeverityMedium |
|---|
CVE-2023-3526PHOENIX CONTACT: Cross-site Scripting vulnerability in TC ROUTER, TC CLOUD CLIENT and CLOUD CLIENT devices | Exploitation statusNot exploited | FixYes | Affected productCLOUD CLIENT 1101T-TX/TX | Published08/08/2023 | SeverityCritical |
|---|
193 Results | Page 3 of 4