← CVE Intelligence

CVE-2023-46141

Phoenix Contact: Automation Worx and classic line controllers prone to Incorrect Permission Assignment for Critical Resource PUBLISHED

Description (CNA)

Incorrect Permission Assignment for Critical Resource vulnerability in multiple products of the PHOENIX CONTACT classic line allow an remote unauthenticated attacker to gain full access of the affected device.

Affected (CNA)

Vendor / productVersions
PHOENIX CONTACT / Automation Worx Software Suiteaffected all
PHOENIX CONTACT / AXC 1050affected all
PHOENIX CONTACT / AXC 1050 XCaffected all
PHOENIX CONTACT / AXC 3050affected all
PHOENIX CONTACT / Config+affected all
PHOENIX CONTACT / FC 350 PCI ETHaffected all
PHOENIX CONTACT / ILC1x0affected all
PHOENIX CONTACT / ILC1x1affected all
PHOENIX CONTACT / ILC 3xxaffected all
PHOENIX CONTACT / PC Worxaffected all
PHOENIX CONTACT / PC Worx Expressaffected all
PHOENIX CONTACT / PC WORX RT BASICaffected all
PHOENIX CONTACT / PC WORX SRTaffected all
PHOENIX CONTACT / RFC 430 ETH-IBaffected all
PHOENIX CONTACT / RFC 450 ETH-IBaffected all
PHOENIX CONTACT / RFC 460R PN 3TXaffected all
PHOENIX CONTACT / RFC 470S PN 3TXaffected all
PHOENIX CONTACT / RFC 480S PN 4TXaffected all

CWE

CWE-732

References

ADP enrichment

CVE

No English description supplied.