NetSight
high7.5

CVE-2023-46143

Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT classic line PLCs allows an unauthenticated remote attacker to modify some or all app…

Impact

Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT classic line PLCs allows an unauthenticated remote attacker to modify some or all applications on a PLC.

Affected products

VendorProductAffected versions
PhoenixcontactAutomationworx Software Suite
All versions
PhoenixcontactAxc 1050 Firmware
All versions
PhoenixcontactAxc 1050 Xc Firmware
All versions
PhoenixcontactAxc 3050 Firmware
All versions
PhoenixcontactConfig\+
All versions
PhoenixcontactFc 350 Pci Eth Firmware
All versions
PhoenixcontactIlc1x0 Firmware
All versions
PhoenixcontactIlc1x1 Firmware
All versions
PhoenixcontactIlc 3xx Firmware
All versions
PhoenixcontactPc Worx
All versions
PhoenixcontactPc Worx Express
All versions
PhoenixcontactPc Worx Rt Basic Firmware
All versions

Weakness classification

References