CVE-2019-12869

CVE-2019-12869 is a critical vulnerability affecting Phoenix Contact PC Worx, PC Worx Express, and Config+ software versions up to 1.86. This flaw allows for out-of-bounds read, information disclosure, and remote code execution through a manipulated project file. With a CVSS score of 8.8 (High), exploitation requires an attacker to first gain access to and modify an original project file, then replace it on the target workstation, making it a high-impact but user-interaction dependent attack. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered some community discussion and media coverage, indicating awareness within the cybersecurity community.