Full device access via unsigned controller logic

Insufficient logic protection in Phoenix Contact classic controllers of all versions allows remote attackers to load arbitrary malicious control code. The controllers do not verify the integrity or authenticity of Automation Worx logic files, so altered logic and configurations load without tamper detection. Network or physical access to an engineering station or controller is required; malicious logic can take full control of controller behavior.