CVE-2023-46141
Critical
Description
Incorrect Permission Assignment for Critical Resource vulnerability in multiple products of the PHOENIX CONTACT classic line allow an remote unauthenticated attacker to gain full access of the affected device.
SeverityCritical
CVSS9.8
Exploit probability—
ProductPhoenixcontact Automationworx Software Suite
PublishedDec 14, 2023
First seenDec 14, 2023
Weakness typeCWE-732CWE-732
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phoenixcontact automationworx_software_suite | No range specified | — |
| phoenixcontact axc_1050_firmware | No range specified | — |
| phoenixcontact axc_1050_xc_firmware | No range specified | — |
| phoenixcontact axc_3050_firmware | No range specified | — |
| phoenixcontact config\+ | No range specified | — |
| phoenixcontact fc_350_pci_eth_firmware | No range specified | — |
| phoenixcontact ilc1x0_firmware | No range specified | — |
| phoenixcontact ilc1x1_firmware | No range specified | — |
| phoenixcontact ilc_3xx_firmware | No range specified | — |
| phoenixcontact pc_worx | No range specified | — |
| phoenixcontact pc_worx_express | No range specified | — |
| phoenixcontact pc_worx_rt_basic_firmware | No range specified | — |
| phoenixcontact pc_worx_srt | No range specified | — |
| phoenixcontact rfc_430_eth-ib_firmware | No range specified | — |
| phoenixcontact rfc_450_eth-ib_firmware | No range specified | — |
| phoenixcontact rfc_460r_pn_3tx_firmware | No range specified | — |
| phoenixcontact rfc_470s_pn_3tx_firmware | No range specified | — |
| phoenixcontact rfc_480s_pn_4tx_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.