CVE-2019-16675

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86. A manipulated PC Worx or Config+ project file could lead to an Out-of-bounds Read and remote code execution. The attacker needs to get access to an original PC Worx or Config+ project to be able to manipulate data inside. After manipulation, the attacker needs to exchange the original files with the manipulated ones on the application programming workstation.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-125

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://cert.vde.com/en-us/advisoriesThird Party Advisory
https://www.us-cert.gov/ics/advisories/icsa-19-302-01Third Party Advisory, US Government Resource
https://www.zerodayinitiative.com/advisories/ZDI-19-922/Third Party Advisory, VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-19-991/
https://cert.vde.com/en-us/advisoriesThird Party Advisory
https://www.us-cert.gov/ics/advisories/icsa-19-302-01Third Party Advisory, US Government Resource
https://www.zerodayinitiative.com/advisories/ZDI-19-922/Third Party Advisory, VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-19-991/

Timeline

Published: Oct 31, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-166769.8Plataformatec Simple Form has Incorrect Access Control in file_method? in lib/simple_form/form_builder.rb, because a user-supplied string is CVE-2019-166776.5An issue was discovered in idreamsoft iCMS V7.0. admincp.php?app=members&do=del allows CSRF.CVE-2019-166786.5admin/urlrule/add.html in YzmCMS 5.3 allows CSRF with a resultant denial of service by adding a superseding route.CVE-2019-166794.9Gila CMS before 1.11.1 allows admin/fm/?f=../ directory traversal, leading to Local File Inclusion.CVE-2019-16686.1A vulnerability in the chat feed feature of Cisco SocialMiner could allow an unauthenticated, remote attacker to perform cross-site scriptin CVE-2019-166804.3An issue was discovered in GNOME file-roller before 3.29.91. It allows a single ./../ path traversal via a filename contained in a TAR archi CVE-2019-166814.7The Traveloka application 3.14.0 for Android exports com.traveloka.android.activity.common.WebViewActivity, leading to the opening of arbitr CVE-2019-166827.3The url_redirect (aka URL redirect) extension through 1.2.1 for TYPO3 fails to properly sanitize user input and is susceptible to SQL Inject CVE-2019-166834.8An issue was discovered in the image-manager in Xoops 2.5.10. When the breadcrumb showing the category name is hovered over while editing an CVE-2019-166844.8An issue was discovered in the image-manager in Xoops 2.5.10. When any image with a JavaScript payload as its name is hovered over in the li CVE-2019-166855.4Dolibarr 9.0.5 has stored XSS vulnerability via a User Group Description section to card.php. A user with the "Create/modify other users, gr CVE-2019-166865.4Dolibarr 9.0.5 has stored XSS in a User Note section to note.php. A user with no privileges can inject script to attack the admin.