CVE-2023-46143: Phoenix Contact: Classic line industrial controllers prone to inadequate integrity check of PLC
First published: Thu Dec 14 2023(Updated: )
Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT classic line PLCs allows an unauthenticated remote attacker to modify some or all applications on a PLC.
Credit: info@cert.vde.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Phoenix Contact Automationworx | ||
| All of | ||
| Phoenix Contact Axc 1050 Firmware | ||
| Phoenix Contact Axc 1050 Firmware | ||
| All of | ||
| Phoenix Contact Axc 1050 XC Firmware | ||
| Phoenix Contact Axc 1050 XC Firmware | ||
| All of | ||
| Phoenix Contact AXC 3050 | ||
| Phoenix Contact AXC 3050 | ||
| Phoenix Contact Config+ | ||
| All of | ||
| Phoenix Contact FC 350 PCI ETH Firmware | ||
| Phoenix Contact FC 350 PCI ETH Firmware | ||
| All of | ||
| Phoenix Contact ILC 1x0 Firmware | ||
| Phoenix Contact ILC 1x0 Firmware | ||
| All of | ||
| Phoenix Contact ILC 1x1 GSM/GPRS Firmware | ||
| Phoenix Contact ILC 1x1 GSM/GPRS Firmware | ||
| All of | ||
| Phoenix Contact ILC 3xx | ||
| Phoenix Contact ILC 3xx | ||
| Phoenix Contact PC Worx | ||
| Phoenix Contact PC Worx Express | ||
| All of | ||
| Phoenix Contact PC Worx RT Basic | ||
| Phoenix Contact PC Worx RT Basic | ||
| Phoenix Contact PC Worx SRT | ||
| All of | ||
| Phoenix Contact RFC 430 ETH-IB | ||
| Phoenix Contact RFC 430 ETH-IB | ||
| All of | ||
| Phoenix Contact RFC 450 ETH-IB Firmware | ||
| Phoenix Contact RFC 450 ETH-IB Firmware | ||
| All of | ||
| Phoenix Contact RFC 460R PN 3TX | ||
| Phoenix Contact RFC 460R PN 3TX | ||
| All of | ||
| Phoenix Contact RFC 470S PN 3TX Firmware | ||
| phoenixcontact rfc 470s pn 3tx firmware | ||
| All of | ||
| Phoenix Contact RFC 480S PN 4TX Firmware | ||
| Phoenix Contact RFC 480S PN 4TX Firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2023-46143?
CVE-2023-46143 is considered a high severity vulnerability due to the potential for unauthorized modification of applications on affected PLCs.
How do I fix CVE-2023-46143?
To fix CVE-2023-46143, ensure that you apply the latest firmware updates provided by Phoenix Contact for the affected devices.
What devices are affected by CVE-2023-46143?
CVE-2023-46143 affects various Phoenix Contact automation systems including the Automationworx software suite and several PLC firmware versions.
What are the potential impacts of CVE-2023-46143?
The vulnerability could allow an unauthenticated remote attacker to modify applications on a PLC, potentially leading to system malfunctions or unauthorized access.
Is CVE-2023-46143 remotely exploitable?
Yes, CVE-2023-46143 can be exploited remotely by an unauthenticated attacker.
- agent/event
- agent/type
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/references
- agent/title
- agent/weakness
- agent/last-modified-date
- agent/description
- agent/author
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-api
- agent/software-canonical-lookup-request
- vendor/phoenixcontact
- canonical/phoenix contact automationworx
- canonical/phoenix contact axc 1050 firmware
- canonical/phoenix contact axc 1050 xc firmware
- canonical/phoenix contact axc 3050
- canonical/phoenix contact config+
- canonical/phoenix contact fc 350 pci eth firmware
- canonical/phoenix contact ilc 1x0 firmware
- canonical/phoenix contact ilc 1x1 gsm/gprs firmware
- canonical/phoenix contact ilc 3xx
- canonical/phoenix contact pc worx
- canonical/phoenix contact pc worx express
- canonical/phoenix contact pc worx rt basic
- canonical/phoenix contact pc worx srt
- canonical/phoenix contact rfc 430 eth-ib
- canonical/phoenix contact rfc 450 eth-ib firmware
- canonical/phoenix contact rfc 460r pn 3tx
- canonical/phoenix contact rfc 470s pn 3tx firmware
- canonical/phoenixcontact rfc 470s pn 3tx firmware
- canonical/phoenix contact rfc 480s pn 4tx firmware