← CVE Intelligence

CVE-2023-46143

Phoenix Contact: Classic line industrial controllers prone to inadequate integrity check of PLC PUBLISHED

Description (CNA)

Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT classic line PLCs allows an unauthenticated remote attacker to modify some or all applications on a PLC.

Affected (CNA)

Vendor / productVersions
PHOENIX CONTACT / Automation Worx Software Suiteaffected all
PHOENIX CONTACT / AXC 1050affected all
PHOENIX CONTACT / AXC 1050 XCaffected all
PHOENIX CONTACT / AXC 3050affected all
PHOENIX CONTACT / Config+affected all
PHOENIX CONTACT / FC 350 PCI ETHaffected all
PHOENIX CONTACT / ILC1x0affected all
PHOENIX CONTACT / ILC1x1affected all
PHOENIX CONTACT / ILC 3xxaffected all
PHOENIX CONTACT / PC Worxaffected all
PHOENIX CONTACT / PC Worx Expressaffected all
PHOENIX CONTACT / PC WORX RT BASICaffected all
PHOENIX CONTACT / PC WORX SRTaffected all
PHOENIX CONTACT / RFC 430 ETH-IBaffected all
PHOENIX CONTACT / RFC 450 ETH-IBaffected all
PHOENIX CONTACT / RFC 460R PN 3TXaffected all
PHOENIX CONTACT / RFC 470S PN 3TXaffected all
PHOENIX CONTACT / RFC 480S PN 4TXaffected all

CWE

CWE-494

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.