CVEvulnerability

CVE-2023-46143

7.5 HIGH Published 2023-12-14 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-12-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weaknesses
CWE-494

Description

Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT classic line PLCs allows an unauthenticated remote attacker to modify some or all applications on a PLC.

Affected configurations

• phoenixcontact automationworx software suite • phoenixcontact axc 1050 firmware • phoenixcontact axc 1050 xc firmware • phoenixcontact axc 3050 firmware • phoenixcontact config\+ • phoenixcontact fc 350 pci eth firmware • phoenixcontact ilc1x0 firmware • phoenixcontact ilc1x1 firmware • phoenixcontact ilc 3xx firmware • phoenixcontact pc worx • phoenixcontact pc worx express • phoenixcontact pc worx rt basic firmware • phoenixcontact pc worx srt • phoenixcontact rfc 430 eth-ib firmware • phoenixcontact rfc 450 eth-ib firmware • phoenixcontact rfc 460r pn 3tx firmware • phoenixcontact rfc 470s pn 3tx firmware • phoenixcontact rfc 480s pn 4tx firmware

Related

Weakness · CWE (1)

  • CWE-494 Download of Code Without Integrity Check weakness

References