CVE-2023-46143
High
Description
Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT classic line PLCs allows an unauthenticated remote attacker to modify some or all applications on a PLC.
SeverityHigh
CVSS7.5
Exploit probability—
ProductPhoenixcontact Automationworx Software Suite
PublishedDec 14, 2023
First seenDec 14, 2023
Weakness typeCWE-494CWE-494
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phoenixcontact automationworx_software_suite | No range specified | — |
| phoenixcontact axc_1050_firmware | No range specified | — |
| phoenixcontact axc_1050_xc_firmware | No range specified | — |
| phoenixcontact axc_3050_firmware | No range specified | — |
| phoenixcontact config\+ | No range specified | — |
| phoenixcontact fc_350_pci_eth_firmware | No range specified | — |
| phoenixcontact ilc1x0_firmware | No range specified | — |
| phoenixcontact ilc1x1_firmware | No range specified | — |
| phoenixcontact ilc_3xx_firmware | No range specified | — |
| phoenixcontact pc_worx | No range specified | — |
| phoenixcontact pc_worx_express | No range specified | — |
| phoenixcontact pc_worx_rt_basic_firmware | No range specified | — |
| phoenixcontact pc_worx_srt | No range specified | — |
| phoenixcontact rfc_430_eth-ib_firmware | No range specified | — |
| phoenixcontact rfc_450_eth-ib_firmware | No range specified | — |
| phoenixcontact rfc_460r_pn_3tx_firmware | No range specified | — |
| phoenixcontact rfc_470s_pn_3tx_firmware | No range specified | — |
| phoenixcontact rfc_480s_pn_4tx_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.