CVE-2023-46144mediumCWE-494

CVE-2023-46144: falha de média gravidade em PHOENIX CONTACT AXC F 1152

PHOENIX CONTACT: PLCnext Control prone to download of code without integrity check

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar AXC F+ Monitorar RFC

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.5epss 0.3%
A download of code without integrity check vulnerability in PLCnext products allows an remote attacker with low privileges to compromise integrity on the affected engineering station and the connected devices.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Produtos afetados
PHOENIX CONTACT · AXC F 1152PHOENIX CONTACT · AXC F 2152PHOENIX CONTACT · AXC F 3152PHOENIX CONTACT · BPC 9102SPHOENIX CONTACT · EPC 1502PHOENIX CONTACT · EPC 1522PHOENIX CONTACT · PLCnext EngineerPHOENIX CONTACT · RFC 4072RPHOENIX CONTACT · RFC 4072S
CVEs relacionadas — PHOENIX CONTACT AXC F 1152

No mesmo produto, das mais perigosas para as menos.

CVE-2023-46142HIGHPHOENIX CONTACT: Insufficient Read and Write Protection to Logic and Runtime Data in PLCnext ControlEPSS 0.7%CVE-2025-41668HIGHPhoenix Contact: File access due to the replacement of a critical file used by the service security-profileEPSS 0.6%CVE-2025-41667HIGHPhoenix Contact: File access due to the replacement of a critical file used by the arp-preinit scriptEPSS 0.6%CVE-2025-41666HIGHPhoenix Contact: File access due to the replacement of a critical file used by the watchdogEPSS 0.6%CVE-2025-41665MEDIUMPhoenix Contact: DoS of the PLC due to incorrect default permissions possibleEPSS 0.4%