CVE-2023-46142: PHOENIX CONTACT: Insufficient Read and Write Protection to Logic and Runtime Data in PLCnext Control
A incorrect permission assignment for critical resource vulnerability in PLCnext products allows an remote attacker with low privileges to gain full access on the affected devices.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-46142?
CVE-2023-46142 is considered a critical vulnerability due to its potential to allow unauthorized remote access to affected devices.
How do I fix CVE-2023-46142?
To fix CVE-2023-46142, update the firmware of the affected Phoenix Contact devices to the latest version released after 2024.0.
Which devices are affected by CVE-2023-46142?
The affected devices include Phoenix Contact AXC F 1152, AXC F 2152, AXC F 3152, BPC 9102S, EPC 1502, EPC 1522, RFC 4072R, and RFC 4072S firmware versions up to 2024.0.
What is the impact of CVE-2023-46142 on affected systems?
CVE-2023-46142 allows remote attackers with low privileges to gain full access to the affected devices, potentially compromising system integrity.
Is there a known exploit for CVE-2023-46142?
As of now, there have been no specific exploits publicly disclosed for CVE-2023-46142, but the vulnerability's nature poses a significant risk.