Skip to content
NewA calmer, faster ZeroHour
Vulnerability2

CVE-2023-46143

CVSS 3.1
7.5 high
EPSS
<1%p26
Published
·
Modified
Analyze CVE-2023-46143 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT classic line PLCs allows an unauthenticated remote attacker to modify some or all applications on a PLC.

Vendors
phoenixcontact
Products
automationworx software suite, axc 1050 firmware, axc 1050 xc firmware, axc 3050 firmware, config\+, fc 350 pci eth firmware, ilc1x0 firmware, ilc1x1 firmware, ilc 3xx firmware, pc worx, pc worx express, pc worx rt basic firmware
Weakness
CWE-494
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news

1 story