high8.8
CVE-2023-46142
A incorrect permission assignment for critical resource vulnerability in PLCnext products allows an remote attacker with low privileges to gain full access on …
Impact
A incorrect permission assignment for critical resource vulnerability in PLCnext products allows an remote attacker with low privileges to gain full access on the affected devices.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phoenixcontact | Axc F 1152 Firmware | through 2024.0 |
| Phoenixcontact | Axc F 2152 Firmware | through 2024.0 |
| Phoenixcontact | Axc F 3152 Firmware | through 2024.0 |
| Phoenixcontact | Bpc 9102s Firmware | through 2024.0 |
| Phoenixcontact | Epc 1502 Firmware | through 2024.0 |
| Phoenixcontact | Epc 1522 Firmware | through 2024.0 |
| Phoenixcontact | Plcnext Engineer | through 2024.0 |
| Phoenixcontact | Rfc 4072r Firmware | through 2024.0 |
| Phoenixcontact | Rfc 4072s Firmware | through 2024.0 |