Riskcovery

CVE-2023-46143

Phoenix Contact: Classic line industrial controllers prone to inadequate integrity check of PLC

State
Published
Severity
7.5 High
Published
Dec 14, 2023
Updated
May 22, 2025
Reserved
Oct 17, 2023

Read the record on cve.org

Description

Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT classic line PLCs allows an unauthenticated remote attacker to modify some or all applications on a PLC.

Scores

CVSSScoreVectorSource
3.17.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:NCERTVDE

Weaknesses

  • CWE-494 Download of Code Without Integrity Check

Affected Products

ProductVersions
Automation Worx Software SuitePHOENIX CONTACT
  • allAffected
AXC 1050PHOENIX CONTACT
  • allAffected
AXC 1050 XCPHOENIX CONTACT
  • allAffected
AXC 3050PHOENIX CONTACT
  • allAffected
Config+PHOENIX CONTACT
  • allAffected
FC 350 PCI ETHPHOENIX CONTACT
  • allAffected
ILC1x0PHOENIX CONTACT
  • allAffected
ILC1x1PHOENIX CONTACT
  • allAffected
ILC 3xxPHOENIX CONTACT
  • allAffected
PC WorxPHOENIX CONTACT
  • allAffected
PC Worx ExpressPHOENIX CONTACT
  • allAffected
PC WORX RT BASICPHOENIX CONTACT
  • allAffected
PC WORX SRTPHOENIX CONTACT
  • allAffected
RFC 430 ETH-IBPHOENIX CONTACT
  • allAffected
RFC 450 ETH-IBPHOENIX CONTACT
  • allAffected
RFC 460R PN 3TXPHOENIX CONTACT
  • allAffected
RFC 470S PN 3TXPHOENIX CONTACT
  • allAffected
RFC 480S PN 4TXPHOENIX CONTACT
  • allAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.