medium6.5
CVE-2023-46144
A download of code without integrity check vulnerability in PLCnext products allows an remote attacker with low privileges to compromise integrity on the affec…
Impact
A download of code without integrity check vulnerability in PLCnext products allows an remote attacker with low privileges to compromise integrity on the affected engineering station and the connected devices.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phoenixcontact | Axc F 1152 Firmware | through 2024.0 |
| Phoenixcontact | Axc F 2152 Firmware | through 2024.0 |
| Phoenixcontact | Axc F 3152 Firmware | through 2024.0 |
| Phoenixcontact | Bpc 9102s Firmware | through 2024.0 |
| Phoenixcontact | Epc 1502 Firmware | through 2024.0 |
| Phoenixcontact | Epc 1522 Firmware | through 2024.0 |
| Phoenixcontact | Plcnext Engineer | through 2024.0 |
| Phoenixcontact | Rfc 4072r Firmware | through 2024.0 |
| Phoenixcontact | Rfc 4072s Firmware | through 2024.0 |