{"id":"CVE-2023-46143","state":"PUBLISHED","title":"Phoenix Contact: Classic line industrial controllers prone to inadequate integrity check of PLC","description":"Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT classic line PLCs allows an unauthenticated remote attacker to modify some or all applications on a PLC.","publishedAt":"2023-12-14T14:06:06.479Z","updatedAt":"2025-05-22T17:39:45.716Z","severity":{"score":7.5,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","source":"CERTVDE"},"assigner":"CERTVDE","products":["PHOENIX CONTACT Automation Worx Software Suite","PHOENIX CONTACT AXC 1050","PHOENIX CONTACT AXC 1050 XC","PHOENIX CONTACT AXC 3050","PHOENIX CONTACT Config+","PHOENIX CONTACT FC 350 PCI ETH","PHOENIX CONTACT ILC1x0","PHOENIX CONTACT ILC1x1","PHOENIX CONTACT ILC 3xx","PHOENIX CONTACT PC Worx","PHOENIX CONTACT PC Worx Express","PHOENIX CONTACT PC WORX RT BASIC","PHOENIX CONTACT PC WORX SRT","PHOENIX CONTACT RFC 430 ETH-IB","PHOENIX CONTACT RFC 450 ETH-IB","PHOENIX CONTACT RFC 460R PN 3TX","PHOENIX CONTACT RFC 470S PN 3TX","PHOENIX CONTACT RFC 480S PN 4TX"],"affected":[{"vendor":"PHOENIX CONTACT","product":"Automation Worx Software Suite","defaultStatus":"unaffected","versions":[{"version":"all","status":"affected"}]},{"vendor":"PHOENIX CONTACT","product":"AXC 1050","defaultStatus":"unaffected","versions":[{"version":"all","status":"affected"}]},{"vendor":"PHOENIX CONTACT","product":"AXC 1050 XC","defaultStatus":"unaffected","versions":[{"version":"all","status":"affected"}]},{"vendor":"PHOENIX CONTACT","product":"AXC 3050","defaultStatus":"unaffected","versions":[{"version":"all","status":"affected"}]},{"vendor":"PHOENIX CONTACT","product":"Config+","defaultStatus":"unaffected","versions":[{"version":"all","status":"affected"}]},{"vendor":"PHOENIX CONTACT","product":"FC 350 PCI ETH","defaultStatus":"unaffected","versions":[{"version":"all","status":"affected"}]},{"vendor":"PHOENIX CONTACT","product":"ILC1x0","defaultStatus":"unaffected","versions":[{"version":"all","status":"affected"}]},{"vendor":"PHOENIX CONTACT","product":"ILC1x1","defaultStatus":"unaffected","versions":[{"version":"all","status":"affected"}]},{"vendor":"PHOENIX CONTACT","product":"ILC 3xx","defaultStatus":"unaffected","versions":[{"version":"all","status":"affected"}]},{"vendor":"PHOENIX CONTACT","product":"PC Worx","defaultStatus":"unaffected","versions":[{"version":"all","status":"affected"}]},{"vendor":"PHOENIX CONTACT","product":"PC Worx Express","defaultStatus":"unaffected","versions":[{"version":"all","status":"affected"}]},{"vendor":"PHOENIX CONTACT","product":"PC WORX RT BASIC","defaultStatus":"unaffected","versions":[{"version":"all","status":"affected"}]},{"vendor":"PHOENIX CONTACT","product":"PC WORX SRT","defaultStatus":"unaffected","versions":[{"version":"all","status":"affected"}]},{"vendor":"PHOENIX CONTACT","product":"RFC 430 ETH-IB","defaultStatus":"unaffected","versions":[{"version":"all","status":"affected"}]},{"vendor":"PHOENIX CONTACT","product":"RFC 450 ETH-IB","defaultStatus":"unaffected","versions":[{"version":"all","status":"affected"}]},{"vendor":"PHOENIX CONTACT","product":"RFC 460R PN 3TX","defaultStatus":"unaffected","versions":[{"version":"all","status":"affected"}]},{"vendor":"PHOENIX CONTACT","product":"RFC 470S PN 3TX","defaultStatus":"unaffected","versions":[{"version":"all","status":"affected"}]},{"vendor":"PHOENIX CONTACT","product":"RFC 480S PN 4TX","defaultStatus":"unaffected","versions":[{"version":"all","status":"affected"}]}],"references":["https://cert.vde.com/en/advisories/VDE-2023-057/"],"weaknesses":["CWE-494"],"ingestedAt":"2026-10-29T20:06:24.729Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/46xxx/CVE-2023-46143.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-46143","state":"PUBLISHED","datePublished":"2023-12-14T14:06:06.479Z","dateUpdated":"2025-05-22T17:39:45.716Z","assignerShortName":"CERTVDE","assignerOrgId":"270ccfa6-a436-4e77-922e-914ec3a9685c","dateReserved":"2023-10-17T07:04:03.576Z"},"containers":{"cna":{"title":"Phoenix Contact: Classic line industrial controllers prone to inadequate integrity check of PLC","descriptions":[{"lang":"en","value":"Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT classic line PLCs allows an unauthenticated remote attacker to modify some or all applications on a PLC."}],"affected":[{"vendor":"PHOENIX CONTACT","product":"Automation Worx Software Suite","defaultStatus":"unaffected","versions":[{"version":"all","status":"affected"}]},{"vendor":"PHOENIX CONTACT","product":"AXC 1050","defaultStatus":"unaffected","versions":[{"version":"all","status":"affected"}]},{"vendor":"PHOENIX CONTACT","product":"AXC 1050 XC","defaultStatus":"unaffected","versions":[{"version":"all","status":"affected"}]},{"vendor":"PHOENIX CONTACT","product":"AXC 3050","defaultStatus":"unaffected","versions":[{"version":"all","status":"affected"}]},{"vendor":"PHOENIX CONTACT","product":"Config+","defaultStatus":"unaffected","versions":[{"version":"all","status":"affected"}]},{"vendor":"PHOENIX CONTACT","product":"FC 350 PCI ETH","defaultStatus":"unaffected","versions":[{"version":"all","status":"affected"}]},{"vendor":"PHOENIX CONTACT","product":"ILC1x0","defaultStatus":"unaffected","versions":[{"version":"all","status":"affected"}]},{"vendor":"PHOENIX CONTACT","product":"ILC1x1","defaultStatus":"unaffected","versions":[{"version":"all","status":"affected"}]},{"vendor":"PHOENIX CONTACT","product":"ILC 3xx","defaultStatus":"unaffected","versions":[{"version":"all","status":"affected"}]},{"vendor":"PHOENIX CONTACT","product":"PC Worx","defaultStatus":"unaffected","versions":[{"version":"all","status":"affected"}]},{"vendor":"PHOENIX CONTACT","product":"PC Worx Express","defaultStatus":"unaffected","versions":[{"version":"all","status":"affected"}]},{"vendor":"PHOENIX CONTACT","product":"PC WORX RT BASIC","defaultStatus":"unaffected","versions":[{"version":"all","status":"affected"}]},{"vendor":"PHOENIX CONTACT","product":"PC WORX SRT","defaultStatus":"unaffected","versions":[{"version":"all","status":"affected"}]},{"vendor":"PHOENIX CONTACT","product":"RFC 430 ETH-IB","defaultStatus":"unaffected","versions":[{"version":"all","status":"affected"}]},{"vendor":"PHOENIX CONTACT","product":"RFC 450 ETH-IB","defaultStatus":"unaffected","versions":[{"version":"all","status":"affected"}]},{"vendor":"PHOENIX CONTACT","product":"RFC 460R PN 3TX","defaultStatus":"unaffected","versions":[{"version":"all","status":"affected"}]},{"vendor":"PHOENIX CONTACT","product":"RFC 470S PN 3TX","defaultStatus":"unaffected","versions":[{"version":"all","status":"affected"}]},{"vendor":"PHOENIX CONTACT","product":"RFC 480S PN 4TX","defaultStatus":"unaffected","versions":[{"version":"all","status":"affected"}]}],"references":[{"url":"https://cert.vde.com/en/advisories/VDE-2023-057/"}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-494","description":"CWE-494 Download of Code Without Integrity Check","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"CERTVDE","orgId":"270ccfa6-a436-4e77-922e-914ec3a9685c","dateUpdated":"2023-12-14T14:07:36.807Z"},"credits":[{"lang":"en","type":"reporter","user":"00000000-0000-4000-9000-000000000000","value":"Reid Wightman of Dragos, Inc."}],"source":{"advisory":"VDE-2023-057","defect":["CERT@VDE#64610"],"discovery":"EXTERNAL"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://cert.vde.com/en/advisories/VDE-2023-057/","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T20:37:39.880Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-05-22T17:39:21.470279Z","id":"CVE-2023-46143","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-05-22T17:39:45.716Z"}}]}}}