CVEvulnerability

CVE-2023-46144

6.5 MEDIUM Published 2023-12-14 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-12-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Weaknesses
CWE-494

Description

A download of code without integrity check vulnerability in PLCnext products allows an remote attacker with low privileges to compromise integrity on the affected engineering station and the connected devices.

Affected configurations

• phoenixcontact axc f 1152 firmware (<= 2024.0) • phoenixcontact axc f 2152 firmware (<= 2024.0) • phoenixcontact axc f 3152 firmware (<= 2024.0) • phoenixcontact bpc 9102s firmware (<= 2024.0) • phoenixcontact epc 1502 firmware (<= 2024.0) • phoenixcontact epc 1522 firmware (<= 2024.0) • phoenixcontact plcnext engineer (<= 2024.0) • phoenixcontact rfc 4072r firmware (<= 2024.0) • phoenixcontact rfc 4072s firmware (<= 2024.0)

Related

Weakness · CWE (1)

  • CWE-494 Download of Code Without Integrity Check weakness

References