CVEvulnerability

CVE-2023-46141

9.8 CRITICAL Published 2023-12-14 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-12-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-732

Description

Incorrect Permission Assignment for Critical Resource vulnerability in multiple products of the PHOENIX CONTACT classic line allow an remote unauthenticated attacker to gain full access of the affected device.

Affected configurations

• phoenixcontact automationworx software suite • phoenixcontact axc 1050 firmware • phoenixcontact axc 1050 xc firmware • phoenixcontact axc 3050 firmware • phoenixcontact config\+ • phoenixcontact fc 350 pci eth firmware • phoenixcontact ilc1x0 firmware • phoenixcontact ilc1x1 firmware • phoenixcontact ilc 3xx firmware • phoenixcontact pc worx • phoenixcontact pc worx express • phoenixcontact pc worx rt basic firmware • phoenixcontact pc worx srt • phoenixcontact rfc 430 eth-ib firmware • phoenixcontact rfc 450 eth-ib firmware • phoenixcontact rfc 460r pn 3tx firmware • phoenixcontact rfc 470s pn 3tx firmware • phoenixcontact rfc 480s pn 4tx firmware

Related

Weakness · CWE (1)

  • CWE-732 Incorrect Permission Assignment for Critical Resource weakness

References