CVE-2023-46141: Phoenix Contact: Automation Worx and classic line controllers prone to Incorrect Permission Assignment for Critical Resource

Published Dec 14, 2023
·
Updated

Incorrect Permission Assignment for Critical Resource vulnerability in multiple products of the PHOENIX CONTACT classic line allow an remote unauthenticated attacker to gain full access of the affected device.

Affected Software

31 affected components
Phoenixcontact Automationworx Software Suite
All of the following
Phoenixcontact Axc 1050 Firmware
Phoenixcontact Axc 1050
All of the following
Phoenixcontact Axc 1050 Xc Firmware
Phoenixcontact Axc 1050 Xc
All of the following
Phoenixcontact Axc 3050 Firmware
Phoenixcontact Axc 3050
Phoenixcontact Config\+
All of the following
Phoenixcontact Fc 350 Pci Eth Firmware
Phoenixcontact Fc 350 Pci Eth
All of the following
Phoenixcontact Ilc1x0 Firmware
Phoenixcontact Ilc1x0
All of the following
Phoenixcontact Ilc1x1 Firmware
Phoenixcontact Ilc1x1
All of the following
Phoenixcontact Ilc 3xx Firmware
Phoenixcontact Ilc 3xx
Phoenixcontact Pc Worx
Phoenixcontact Pc Worx Express
All of the following
Phoenixcontact Pc Worx Rt Basic Firmware
Phoenixcontact Pc Worx Rt Basic
Phoenixcontact Pc Worx Srt
All of the following
Phoenixcontact Rfc 430 Eth-ib Firmware
Phoenixcontact Rfc 430 Eth-ib
All of the following
Phoenixcontact Rfc 450 Eth-ib Firmware
Phoenixcontact Rfc 450 Eth-ib
All of the following
Phoenixcontact Rfc 460r Pn 3tx Firmware
Phoenixcontact Rfc 460r Pn 3tx
All of the following
Phoenixcontact Rfc 470s Pn 3tx Firmware
Phoenixcontact Rfc 470s Pn 3tx
All of the following
Phoenixcontact Rfc 480s Pn 4tx Firmware
Phoenixcontact Rfc 480s Pn 4tx

Event History

Dec 14, 2023
CVE Published
02:05 PM
Data Sourced
02:05 PM
DescriptionSeverityWeakness
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2023-46141?

CVE-2023-46141 has a high severity rating as it allows a remote unauthenticated attacker to gain full access to the affected devices.

2

How do I fix CVE-2023-46141?

To fix CVE-2023-46141, apply the latest security update provided by Phoenix Contact for the affected products.

3

Which products are affected by CVE-2023-46141?

CVE-2023-46141 affects multiple products within the Phoenix Contact classic line including Automationworx, Config+, and various firmware versions.

4

What type of vulnerability is CVE-2023-46141?

CVE-2023-46141 is categorized as an Incorrect Permission Assignment for Critical Resource vulnerability.

5

Can CVE-2023-46141 be exploited remotely?

Yes, CVE-2023-46141 can be exploited remotely without authentication, allowing attackers to gain unauthorized access.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203