Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2023-46143

Phoenix Contact: Classic line industrial controllers prone to inadequate integrity check of PLC

Description

Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT classic line PLCs allows an unauthenticated remote attacker to modify some or all applications on a PLC.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PHOENIX CONTACT Automation Worx Software Suite

Default version status: unaffected

  • allaffected

PHOENIX CONTACT AXC 1050

Default version status: unaffected

  • allaffected

PHOENIX CONTACT AXC 1050 XC

Default version status: unaffected

  • allaffected

PHOENIX CONTACT AXC 3050

Default version status: unaffected

  • allaffected

PHOENIX CONTACT Config+

Default version status: unaffected

  • allaffected

PHOENIX CONTACT FC 350 PCI ETH

Default version status: unaffected

  • allaffected

PHOENIX CONTACT ILC1x0

Default version status: unaffected

  • allaffected

PHOENIX CONTACT ILC1x1

Default version status: unaffected

  • allaffected

PHOENIX CONTACT ILC 3xx

Default version status: unaffected

  • allaffected

PHOENIX CONTACT PC Worx

Default version status: unaffected

  • allaffected

PHOENIX CONTACT PC Worx Express

Default version status: unaffected

  • allaffected

PHOENIX CONTACT PC WORX RT BASIC

Default version status: unaffected

  • allaffected

PHOENIX CONTACT PC WORX SRT

Default version status: unaffected

  • allaffected

PHOENIX CONTACT RFC 430 ETH-IB

Default version status: unaffected

  • allaffected

PHOENIX CONTACT RFC 450 ETH-IB

Default version status: unaffected

  • allaffected

PHOENIX CONTACT RFC 460R PN 3TX

Default version status: unaffected

  • allaffected

PHOENIX CONTACT RFC 470S PN 3TX

Default version status: unaffected

  • allaffected

PHOENIX CONTACT RFC 480S PN 4TX

Default version status: unaffected

  • allaffected

References