Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2023-46144

PHOENIX CONTACT: PLCnext Control prone to download of code without integrity check

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

A download of code without integrity check vulnerability in PLCnext products allows an remote attacker with low privileges to compromise integrity on the affected engineering station and the connected devices.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PHOENIX CONTACT AXC F 1152

Default version status: unaffected

  • 0 to ≤ 2024.0affected

PHOENIX CONTACT AXC F 2152

Default version status: unaffected

  • 0 to ≤ 2024.0affected

PHOENIX CONTACT AXC F 3152

Default version status: unaffected

  • 0 to ≤ 2024.0affected

PHOENIX CONTACT BPC 9102S

Default version status: unaffected

  • 0 to ≤ 2024.0affected

PHOENIX CONTACT EPC 1502

Default version status: unaffected

  • 0 to ≤ 2024.0affected

PHOENIX CONTACT EPC 1522

Default version status: unaffected

  • 0 to ≤ 2024.0affected

PHOENIX CONTACT PLCnext Engineer

Default version status: unaffected

  • 0 to ≤ 2024.0affected

PHOENIX CONTACT RFC 4072R

Default version status: unaffected

  • 0 to ≤ 2024.0affected

PHOENIX CONTACT RFC 4072S

Default version status: unaffected

  • 0 to ≤ 2024.0affected

References