CVE-2023-46144: PHOENIX CONTACT: PLCnext Control prone to download of code without integrity check
First published: Thu Dec 14 2023(Updated: )
A download of code without integrity check vulnerability in PLCnext products allows an remote attacker with low privileges to compromise integrity on the affected engineering station and the connected devices.
Credit: info@cert.vde.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| Phoenixcontact Axc F 1152 Firmware | <=2024.0 | |
| Phoenixcontact Axc F 1152 | ||
| All of | ||
| Phoenixcontact Axc F 2152 Firmware | <=2024.0 | |
| Phoenixcontact Axc F 2152 | ||
| All of | ||
| Phoenixcontact Axc F 3152 Firmware | <=2024.0 | |
| Phoenixcontact Axc F 3152 | ||
| All of | ||
| Phoenixcontact Bpc 9102s Firmware | <=2024.0 | |
| Phoenixcontact Bpc 9102s | ||
| All of | ||
| Phoenixcontact Epc 1502 Firmware | <=2024.0 | |
| Phoenixcontact Epc 1502 | ||
| All of | ||
| Phoenixcontact Epc 1522 Firmware | <=2024.0 | |
| Phoenixcontact Epc 1522 | ||
| Phoenixcontact Plcnext Engineer | <=2024.0 | |
| All of | ||
| Phoenixcontact Rfc 4072r Firmware | <=2024.0 | |
| Phoenixcontact Rfc 4072r | ||
| All of | ||
| Phoenixcontact Rfc 4072s Firmware | <=2024.0 | |
| Phoenixcontact Rfc 4072s |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- agent/type
- agent/event
- agent/first-publish-date
- agent/softwarecombine
- agent/weakness
- agent/title
- agent/tags
- agent/author
- agent/references
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- vendor/phoenixcontact
- canonical/phoenixcontact axc f 1152 firmware
- version/phoenixcontact axc f 1152 firmware/2024.0
- canonical/phoenixcontact axc f 1152
- canonical/phoenixcontact axc f 2152 firmware
- version/phoenixcontact axc f 2152 firmware/2024.0
- canonical/phoenixcontact axc f 2152
- canonical/phoenixcontact axc f 3152 firmware
- version/phoenixcontact axc f 3152 firmware/2024.0
- canonical/phoenixcontact axc f 3152
- canonical/phoenixcontact bpc 9102s firmware
- version/phoenixcontact bpc 9102s firmware/2024.0
- canonical/phoenixcontact bpc 9102s
- canonical/phoenixcontact epc 1502 firmware
- version/phoenixcontact epc 1502 firmware/2024.0
- canonical/phoenixcontact epc 1502
- canonical/phoenixcontact epc 1522 firmware
- version/phoenixcontact epc 1522 firmware/2024.0
- canonical/phoenixcontact epc 1522
- canonical/phoenixcontact plcnext engineer
- version/phoenixcontact plcnext engineer/2024.0
- canonical/phoenixcontact rfc 4072r firmware
- version/phoenixcontact rfc 4072r firmware/2024.0
- canonical/phoenixcontact rfc 4072r
- canonical/phoenixcontact rfc 4072s firmware
- version/phoenixcontact rfc 4072s firmware/2024.0
- canonical/phoenixcontact rfc 4072s