Skip to main content

Automationworx Software Suite CVE-2023-46143

HIGH
Download of Code Without Integrity Check (CWE-494)
2023-12-14 info@cert.vde.com
Information Disclosure Automationworx Software Suite Axc 1050 Firmware Axc 1050 Xc Firmware Axc 3050 Firmware Config Fc 350 Pci Eth Firmware Ilc1X0 Firmware Ilc1X1 Firmware Ilc 3Xx Firmware Pc Worx Pc Worx Express Pc Worx Rt Basic Firmware Pc Worx Srt Rfc 430 Eth Ib Firmware Rfc 450 Eth Ib Firmware Rfc 460R Pn 3Tx Firmware Rfc 470S Pn 3Tx Firmware Rfc 480S Pn 4Tx Firmware
7.5
CVSS 3.1 · Vendor: cert
Share

Severity by source

Vendor (cert) PRIMARY
7.5 HIGH
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Primary rating from Vendor (cert) · only source for this CVE.

CVSS VectorVendor: cert

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
High
Availability
None

Lifecycle Timeline

1
CVE Published
Dec 14, 2023 - 14:15 cve.org
HIGH 7.5

DescriptionCVE.org

Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT classic line PLCs allows an unauthenticated remote attacker to modify some or all applications on a PLC.

AnalysisAI

Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT classic line PLCs allows an unauthenticated remote attacker to modify some or all applications on a PLC. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-494. Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT classic line PLCs allows an unauthenticated remote attacker to modify some or all applications on a PLC. Affected products include: Phoenixcontact Automationworx Software Suite, Phoenixcontact Axc 1050 Firmware, Phoenixcontact Axc 1050 Xc Firmware, Phoenixcontact Axc 3050 Firmware, Phoenixcontact Config\+.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Automationworx Software Suite

View all
CVE-2023-46141 CRITICAL
9.8 Dec 14

Incorrect Permission Assignment for Critical Resource vulnerability in multiple products of the PHOENIX CONTACT classic

CVE-2019-12870 HIGH
8.8 Jun 24

An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86.
CVE-2019-12869 HIGH
8.8 Jun 24

An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86.
CVE-2019-12871 HIGH
8.8 Jun 24

An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86.
CVE-2022-3737 HIGH
7.8 Nov 15

In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 memory can be read beyond the intended scope due to

CVE-2022-3461 HIGH
7.8 Nov 15

In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 manipulated PC Worx or Config+ files could lead to a

Same weakness CWE-494 – Download of Code Without Integrity Check

View all
CVE-2026-27180 CRITICAL POC
9.8
CVE-2026-3502 HIGH POC
7.8
CVE-2025-15556 HIGH
7.5
CVE-2025-56513 CRITICAL POC
9.8
CVE-2020-28332 CRITICAL POC
9.8
CVE-2022-24644 HIGH POC
8.8
CVE-2022-28944 HIGH POC
8.8
CVE-2025-57431 HIGH POC
8.8

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2023-46143 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy