CVE-2023-46143: Phoenix Contact: Classic line industrial controllers prone to inadequate integrity check of PLC

Published Dec 14, 2023
·
Updated

Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT classic line PLCs allows an unauthenticated remote attacker to modify some or all applications on a PLC.

Affected Software

31 affected components
Phoenixcontact Automationworx Software Suite
All of the following
Phoenixcontact Axc 1050 Firmware
Phoenixcontact Axc 1050
All of the following
Phoenixcontact Axc 1050 Xc Firmware
Phoenixcontact Axc 1050 Xc
All of the following
Phoenixcontact Axc 3050 Firmware
Phoenixcontact Axc 3050
Phoenixcontact Config\+
All of the following
Phoenixcontact Fc 350 Pci Eth Firmware
Phoenixcontact Fc 350 Pci Eth
All of the following
Phoenixcontact Ilc1x0 Firmware
Phoenixcontact Ilc1x0
All of the following
Phoenixcontact Ilc1x1 Firmware
Phoenixcontact Ilc1x1
All of the following
Phoenixcontact Ilc 3xx Firmware
Phoenixcontact Ilc 3xx
Phoenixcontact Pc Worx
Phoenixcontact Pc Worx Express
All of the following
Phoenixcontact Pc Worx Rt Basic Firmware
Phoenixcontact Pc Worx Rt Basic
Phoenixcontact Pc Worx Srt
All of the following
Phoenixcontact Rfc 430 Eth-ib Firmware
Phoenixcontact Rfc 430 Eth-ib
All of the following
Phoenixcontact Rfc 450 Eth-ib Firmware
Phoenixcontact Rfc 450 Eth-ib
All of the following
Phoenixcontact Rfc 460r Pn 3tx Firmware
Phoenixcontact Rfc 460r Pn 3tx
All of the following
Phoenixcontact Rfc 470s Pn 3tx Firmware
Phoenixcontact Rfc 470s Pn 3tx
All of the following
Phoenixcontact Rfc 480s Pn 4tx Firmware
Phoenixcontact Rfc 480s Pn 4tx

Event History

Dec 14, 2023
CVE Published
02:06 PM
Data Sourced
02:06 PM
DescriptionSeverityWeakness
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2023-46143?

CVE-2023-46143 is considered a high severity vulnerability due to the potential for unauthorized modification of applications on affected PLCs.

2

How do I fix CVE-2023-46143?

To fix CVE-2023-46143, ensure that you apply the latest firmware updates provided by Phoenix Contact for the affected devices.

3

What devices are affected by CVE-2023-46143?

CVE-2023-46143 affects various Phoenix Contact automation systems including the Automationworx software suite and several PLC firmware versions.

4

What are the potential impacts of CVE-2023-46143?

The vulnerability could allow an unauthenticated remote attacker to modify applications on a PLC, potentially leading to system malfunctions or unauthorized access.

5

Is CVE-2023-46143 remotely exploitable?

Yes, CVE-2023-46143 can be exploited remotely by an unauthenticated attacker.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203