CVE-2021-33542— Phoenix Contact: Automation Worx Software Suite affected by Remote Code Execution (RCE) vulnerability
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2021-33542
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Phoenix Contact: Automation Worx Software Suite affected by Remote Code Execution (RCE) vulnerability
Source: NVD (National Vulnerability Database)
Vulnerability Description
Phoenix Contact Classic Automation Worx Software Suite in Version 1.87 and below is affected by a remote code execution vulnerability. Manipulated PC Worx or Config+ projects could lead to a remote code execution when unallocated memory is freed because of incompletely initialized data. The attacker needs to get access to an original bus configuration file (*.bcp) to be able to manipulate data inside. After manipulation the attacker needs to exchange the original file by the manipulated one on the application programming workstation. Availability, integrity, or confidentiality of an application programming workstation might be compromised by attacks using these vulnerabilities. Automated systems in operation which were programmed with one of the above-mentioned products are not affected.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
使用未经初始化的指针
Source: NVD (National Vulnerability Database)
Vulnerability Title
Phoenix Contact Classic Automation Worx Software Suite 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Phoenix Contact Classic Automation是德国Phoenix Contac（Phoenix Contact）公司的提供剩余零件和 Phoenix Contact 维修服务。 Phoenix Contact Classic Automation Worx Software Suite 1.87及之前版本存在安全漏洞，该漏洞源于当未分配的内存由于未完全初始化的数据而被释放时，被操纵的PC Worx或Config+项目可能会导致远程代码执行。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Phoenix Contact | Automation Worx Software Suite | PC Worx ~ 1.87 | - |
II. Public POCs for CVE-2021-33542
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-33542
请登录查看更多情报信息。
- https://www.zerodayinitiative.com/advisories/ZDI-21-782/x_refsource_MISC
- https://cert.vde.com/en-us/advisories/vde-2021-020x_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2021-33542
Same Patch Batch · Phoenix Contact · 2021-06-25 · 7 CVEs total
| CVE-2021-21002 | 7.5 HIGH | Denial of Service in Phoenix Contact FL COMSERVER UNI products |
| CVE-2021-21005 | 7.5 HIGH | Race Condition Vulnerability in Phoenix Contact FL SWITCH SMCS series products |
| CVE-2021-33541 | 7.5 HIGH | Phoenix Contact: ILC1x Industrial controllers affected by Denial-of-Service vulnerability |
| CVE-2021-21004 | 7.4 HIGH | Cross-site Scripting Vulnerability in Phoenix Contact FL SWITCH SMCS series products |
| CVE-2021-33540 | 7.3 HIGH | Phoenix Contact: Undocumented FTP acces in certain AXL F BK and IL BK devices |
| CVE-2021-21003 | 5.3 MEDIUM | Denial of Service Vulnerability in Phoenix Contact FL SWITCH SMCS series products |
IV. Related Vulnerabilities
Same vendor: Phoenix Contact
- CVE-2024-43384
Phoenix Contact: Improper removal of sensitive information i - CVE-2026-22323
Cross‑Site Request Forgery in Link Aggregation Configuration - CVE-2026-22322
Stored Cross‑Site Scripting in Link Aggregation Name Handlin - CVE-2026-22321
Stack-Based Buffer Overflow in CLI Login Username Handling o - CVE-2026-22320
Stack-Based Buffer Overflow in TFTP File-Transfer Command Ha
Same weakness: CWE-824
V. Comments for CVE-2021-33542
No comments yet