HIGH🇵🇱 Wersja polska

CVE-2023-46143

CVSS 7.5v3.1pub. 2023-12-14upd. 2024-11-21

Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT classic line PLCs allows an unauthenticated remote attacker to modify some or all applications on a PLC.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

  • Phoenixcontact Automationworx Software Suite

    APP
    Phoenixcontact
    all versions

  • Phoenixcontact Axc 1050

    HW
    Phoenixcontact
    all versions

  • Phoenixcontact Axc 1050 Firmware

    OS
    Phoenixcontact
    all versions

  • Phoenixcontact Axc 1050 Xc

    HW
    Phoenixcontact
    all versions

  • Phoenixcontact Axc 1050 Xc Firmware

    OS
    Phoenixcontact
    all versions

  • Phoenixcontact Axc 3050

    HW
    Phoenixcontact
    all versions

  • Phoenixcontact Axc 3050 Firmware

    OS
    Phoenixcontact
    all versions

  • Phoenixcontact Config\+

    APP
    Phoenixcontact
    all versions

  • Phoenixcontact Fc 350 Pci Eth

    HW
    Phoenixcontact
    all versions

  • Phoenixcontact Fc 350 Pci Eth Firmware

    OS
    Phoenixcontact
    all versions

  • Phoenixcontact Ilc1x0

    HW
    Phoenixcontact
    all versions

  • Phoenixcontact Ilc1x0 Firmware

    OS
    Phoenixcontact
    all versions

  • Phoenixcontact Ilc1x1

    HW
    Phoenixcontact
    all versions

  • Phoenixcontact Ilc1x1 Firmware

    OS
    Phoenixcontact
    all versions

  • Phoenixcontact Ilc 3xx

    HW
    Phoenixcontact
    all versions

  • Phoenixcontact Ilc 3xx Firmware

    OS
    Phoenixcontact
    all versions

  • Phoenixcontact Pc Worx

    APP
    Phoenixcontact
    all versions

  • Phoenixcontact Pc Worx Express

    APP
    Phoenixcontact
    all versions

  • Phoenixcontact Pc Worx Rt Basic

    HW
    Phoenixcontact
    all versions

  • Phoenixcontact Pc Worx Rt Basic Firmware

    OS
    Phoenixcontact
    all versions

  • Phoenixcontact Pc Worx Srt

    APP
    Phoenixcontact
    all versions

  • Phoenixcontact Rfc 430 Eth Ib

    HW
    Phoenixcontact
    all versions

  • Phoenixcontact Rfc 430 Eth Ib Firmware

    OS
    Phoenixcontact
    all versions

  • Phoenixcontact Rfc 450 Eth Ib

    HW
    Phoenixcontact
    all versions

  • Phoenixcontact Rfc 450 Eth Ib Firmware

    OS
    Phoenixcontact
    all versions

  • Phoenixcontact Rfc 460r Pn 3tx

    HW
    Phoenixcontact
    all versions

  • Phoenixcontact Rfc 460r Pn 3tx Firmware

    OS
    Phoenixcontact
    all versions

  • Phoenixcontact Rfc 470s Pn 3tx

    HW
    Phoenixcontact
    all versions

  • Phoenixcontact Rfc 470s Pn 3tx Firmware

    OS
    Phoenixcontact
    all versions

  • Phoenixcontact Rfc 480s Pn 4tx

    HW
    Phoenixcontact
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2023-46141CRITICAL9.8PL ✓same product

Phoenix Contact: nieuprawniony zdalny dostęp do urządzeń linii klasycznej

CVE-2022-31800CRITICAL9.8PL ✓same product

Phoenix Contact AXC: nieautoryzowane wgranie złośliwego kodu do sterownika PLC

CVE-2019-9201CRITICAL9.8PL ✓same product

Phoenix Contact ILC — brak uwierzytelnienia na porcie 1962 (dostęp zdalny)

CVE-2022-3737HIGH7.8same product

In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 memory can be read beyond the intended sco...

CVE-2022-3461HIGH7.8same product

In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 manipulated PC Worx or Config+ files could...