← CVE Intelligence

CVE-2023-46144

PHOENIX CONTACT: PLCnext Control prone to download of code without integrity check PUBLISHED

Description (CNA)

A download of code without integrity check vulnerability in PLCnext products allows an remote attacker with low privileges to compromise integrity on the affected engineering station and the connected devices.

Affected (CNA)

Vendor / productVersions
PHOENIX CONTACT / AXC F 1152affected 0 through 2024.0
PHOENIX CONTACT / AXC F 2152affected 0 through 2024.0
PHOENIX CONTACT / AXC F 3152affected 0 through 2024.0
PHOENIX CONTACT / BPC 9102Saffected 0 through 2024.0
PHOENIX CONTACT / EPC 1502affected 0 through 2024.0
PHOENIX CONTACT / EPC 1522affected 0 through 2024.0
PHOENIX CONTACT / PLCnext Engineeraffected 0 through 2024.0
PHOENIX CONTACT / RFC 4072Raffected 0 through 2024.0
PHOENIX CONTACT / RFC 4072Saffected 0 through 2024.0

CWE

CWE-494

References

ADP enrichment

CVE

No English description supplied.