Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2023-46141

Phoenix Contact: Automation Worx and classic line controllers prone to Incorrect Permission Assignment for Critical Resource

Description

Incorrect Permission Assignment for Critical Resource vulnerability in multiple products of the PHOENIX CONTACT classic line allow an remote unauthenticated attacker to gain full access of the affected device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PHOENIX CONTACT Automation Worx Software Suite

Default version status: unaffected

  • allaffected

PHOENIX CONTACT AXC 1050

Default version status: unaffected

  • allaffected

PHOENIX CONTACT AXC 1050 XC

Default version status: unaffected

  • allaffected

PHOENIX CONTACT AXC 3050

Default version status: unaffected

  • allaffected

PHOENIX CONTACT Config+

Default version status: unaffected

  • allaffected

PHOENIX CONTACT FC 350 PCI ETH

Default version status: unaffected

  • allaffected

PHOENIX CONTACT ILC1x0

Default version status: unaffected

  • allaffected

PHOENIX CONTACT ILC1x1

Default version status: unaffected

  • allaffected

PHOENIX CONTACT ILC 3xx

Default version status: unaffected

  • allaffected

PHOENIX CONTACT PC Worx

Default version status: unaffected

  • allaffected

PHOENIX CONTACT PC Worx Express

Default version status: unaffected

  • allaffected

PHOENIX CONTACT PC WORX RT BASIC

Default version status: unaffected

  • allaffected

PHOENIX CONTACT PC WORX SRT

Default version status: unaffected

  • allaffected

PHOENIX CONTACT RFC 430 ETH-IB

Default version status: unaffected

  • allaffected

PHOENIX CONTACT RFC 450 ETH-IB

Default version status: unaffected

  • allaffected

PHOENIX CONTACT RFC 460R PN 3TX

Default version status: unaffected

  • allaffected

PHOENIX CONTACT RFC 470S PN 3TX

Default version status: unaffected

  • allaffected

PHOENIX CONTACT RFC 480S PN 4TX

Default version status: unaffected

  • allaffected

References