CVE-2023-46142

🗓️ 14 Dec 2023 14:05:35Reported by CERTVDEType

A incorrect permission assignment for critical resource vulnerability in PLCnext products allows an remote attacker with low privileges to gain full access on the affected devices

Reporter	Title	Published	Views	Family All 9
CNNVD	PHOENIX CONTACT PLCnext Control Devices Security Breach	14 Dec 202300:00	–	cnnvd
Cvelist	CVE-2023-46142 PHOENIX CONTACT: Insufficient Read and Write Protection to Logic and Runtime Data in PLCnext Control	14 Dec 202314:05	–	cvelist
EUVD	EUVD-2023-50385	3 Oct 202520:07	–	euvd
NVD	CVE-2023-46142	14 Dec 202314:15	–	nvd
OSV	CVE-2023-46142	14 Dec 202314:15	–	osv
Prion	Code injection	14 Dec 202314:15	–	prion
Positive Technologies	PT-2023-29873 · Plcnext · Plcnext	14 Dec 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-46142	23 May 202503:54	–	redhatcve
Tenable Nessus	Phoenix Contact PLCnext Control Insufficient Read and Write Protection to Logic and Runtime Data (CVE-2023-46142)	8 Jan 202400:00	–	nessus

NVD

Vulners

Node

phoenixcontact axc_f_1152_firmwareRange≤2024.0

AND

phoenixcontact axc_f_1152Match-

Node

phoenixcontact axc_f_2152_firmwareRange≤2024.0

AND

phoenixcontact axc_f_2152Match-

Node

phoenixcontact axc_f_3152_firmwareRange≤2024.0

AND

phoenixcontact axc_f_3152Match-

Node

phoenixcontact bpc_9102s_firmwareRange≤2024.0

AND

phoenixcontact bpc_9102sMatch-

Node

phoenixcontact epc_1502_firmwareRange≤2024.0

AND

phoenixcontact epc_1502Match-

Node

phoenixcontact epc_1522_firmwareRange≤2024.0

AND

phoenixcontact epc_1522Match-

Node

phoenixcontact plcnext_engineerRange≤2024.0

Node

phoenixcontact rfc_4072r_firmwareRange≤2024.0

AND

phoenixcontact rfc_4072rMatch-

Node

phoenixcontact rfc_4072s_firmwareRange≤2024.0

AND

phoenixcontact rfc_4072sMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "AXC F 1152",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThanOrEqual": "2024.0",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "AXC F 2152",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThanOrEqual": "2024.0",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "AXC F 3152",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThanOrEqual": "2024.0",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "BPC 9102S",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThanOrEqual": "2024.0",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "EPC 1502",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThanOrEqual": "2024.0",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "EPC 1522",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThanOrEqual": "2024.0",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "PLCnext Engineer",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThanOrEqual": "2024.0",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "RFC 4072R",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThanOrEqual": "2024.0",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "RFC 4072S",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThanOrEqual": "2024.0",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
https	www.https//cert.vde.com/en/advisories/VDE-2023-056/

21 Nov 2024 08:27Current

8.9High risk

Vulners AI Score8.9

CVSS 3.18.8

EPSS0.00258

CWE-732