Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2023-46142

PHOENIX CONTACT: Insufficient Read and Write Protection to Logic and Runtime Data in PLCnext Control

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

A incorrect permission assignment for critical resource vulnerability in PLCnext products allows an remote attacker with low privileges to gain full access on the affected devices.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PHOENIX CONTACT AXC F 1152

Default version status: unaffected

  • 0 to ≤ 2024.0affected

PHOENIX CONTACT AXC F 2152

Default version status: unaffected

  • 0 to ≤ 2024.0affected

PHOENIX CONTACT AXC F 3152

Default version status: unaffected

  • 0 to ≤ 2024.0affected

PHOENIX CONTACT BPC 9102S

Default version status: unaffected

  • 0 to ≤ 2024.0affected

PHOENIX CONTACT EPC 1502

Default version status: unaffected

  • 0 to ≤ 2024.0affected

PHOENIX CONTACT EPC 1522

Default version status: unaffected

  • 0 to ≤ 2024.0affected

PHOENIX CONTACT PLCnext Engineer

Default version status: unaffected

  • 0 to ≤ 2024.0affected

PHOENIX CONTACT RFC 4072R

Default version status: unaffected

  • 0 to ≤ 2024.0affected

PHOENIX CONTACT RFC 4072S

Default version status: unaffected

  • 0 to ≤ 2024.0affected

References