← CVE Intelligence

CVE-2023-46142

PHOENIX CONTACT: Insufficient Read and Write Protection to Logic and Runtime Data in PLCnext Control PUBLISHED

Description (CNA)

A incorrect permission assignment for critical resource vulnerability in PLCnext products allows an remote attacker with low privileges to gain full access on the affected devices.

Affected (CNA)

Vendor / productVersions
PHOENIX CONTACT / AXC F 1152affected 0 through 2024.0
PHOENIX CONTACT / AXC F 2152affected 0 through 2024.0
PHOENIX CONTACT / AXC F 3152affected 0 through 2024.0
PHOENIX CONTACT / BPC 9102Saffected 0 through 2024.0
PHOENIX CONTACT / EPC 1502affected 0 through 2024.0
PHOENIX CONTACT / EPC 1522affected 0 through 2024.0
PHOENIX CONTACT / PLCnext Engineeraffected 0 through 2024.0
PHOENIX CONTACT / RFC 4072Raffected 0 through 2024.0
PHOENIX CONTACT / RFC 4072Saffected 0 through 2024.0

CWE

CWE-732

References

ADP enrichment

CVE

No English description supplied.