CVE-2023-46143

🗓️ 14 Dec 2023 14:06:06Reported by CERTVDEType

Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT classic line PLCs allows an unauthenticated remote attacker to modify applications

Reporter	Title	Published	Views	Family All 8
CNNVD	PHOENIX CONTACT Multiple Product Security Breach	14 Dec 202300:00	–	cnnvd
Cvelist	CVE-2023-46143 Phoenix Contact: Classic line industrial controllers prone to inadequate integrity check of PLC	14 Dec 202314:06	–	cvelist
EUVD	EUVD-2023-50386	3 Oct 202520:07	–	euvd
NVD	CVE-2023-46143	14 Dec 202314:15	–	nvd
Prion	Design/Logic Flaw	14 Dec 202314:15	–	prion
Positive Technologies	PT-2023-7875 · Phoenix Contact · Fc 350 Pci Eth +4	12 Dec 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-46143	23 May 202503:54	–	redhatcve
Vulnrichment	CVE-2023-46143 Phoenix Contact: Classic line industrial controllers prone to inadequate integrity check of PLC	14 Dec 202314:06	–	vulnrichment

NVD

Vulners

Node

phoenixcontact automationworx_software_suite

Node

phoenixcontact axc_1050_firmware

AND

phoenixcontact axc_1050Match-

Node

phoenixcontact axc_1050_xc_firmware

AND

phoenixcontact axc_1050_xcMatch-

Node

phoenixcontact axc_3050_firmware

AND

phoenixcontact axc_3050Match-

Node

phoenixcontact config+

Node

phoenixcontact fc_350_pci_eth_firmware

AND

phoenixcontact fc_350_pci_ethMatch-

Node

phoenixcontact ilc1x0_firmware

AND

phoenixcontact ilc1x0Match-

Node

phoenixcontact ilc1x1_firmware

AND

phoenixcontact ilc1x1Match-

Node

phoenixcontact ilc_3xx_firmware

AND

phoenixcontact ilc_3xxMatch-

Node

phoenixcontact pc_worx

Node

phoenixcontact pc_worx_express

Node

phoenixcontact pc_worx_rt_basic_firmware

AND

phoenixcontact pc_worx_rt_basicMatch-

Node

phoenixcontact pc_worx_srt

Node

phoenixcontact rfc_430_eth-ib_firmware

AND

phoenixcontact rfc_430_eth-ibMatch-

Node

phoenixcontact rfc_450_eth-ib_firmware

AND

phoenixcontact rfc_450_eth-ibMatch-

Node

phoenixcontact rfc_460r_pn_3tx_firmware

AND

phoenixcontact rfc_460r_pn_3txMatch-

Node

phoenixcontact rfc_470s_pn_3tx_firmware

AND

phoenixcontact rfc_470s_pn_3txMatch-

Node

phoenixcontact rfc_480s_pn_4tx_firmware

AND

phoenixcontact rfc_480s_pn_4txMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "Automation Worx Software Suite",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "status": "affected",
        "version": "all"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "AXC 1050",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "status": "affected",
        "version": "all"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "AXC 1050 XC",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "status": "affected",
        "version": "all"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "AXC 3050",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "status": "affected",
        "version": "all"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Config+",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "status": "affected",
        "version": "all"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "FC 350 PCI ETH",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "status": "affected",
        "version": "all"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "ILC1x0",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "status": "affected",
        "version": "all"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "ILC1x1",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "status": "affected",
        "version": "all"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "ILC 3xx",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "status": "affected",
        "version": "all"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "PC Worx",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "status": "affected",
        "version": "all"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "PC Worx Express",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "status": "affected",
        "version": "all"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "PC WORX RT BASIC",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "status": "affected",
        "version": "all"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "PC WORX SRT",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "status": "affected",
        "version": "all"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "RFC 430 ETH-IB",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "status": "affected",
        "version": "all"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "RFC 450 ETH-IB",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "status": "affected",
        "version": "all"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "RFC 460R PN 3TX",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "status": "affected",
        "version": "all"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "RFC 470S PN 3TX",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "status": "affected",
        "version": "all"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "RFC 480S PN 4TX",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "status": "affected",
        "version": "all"
      }
    ]
  }
]

Source	Link
cert	www.cert.vde.com/en/advisories/VDE-2023-057/

21 Nov 2024 08:27Current

7.7High risk

Vulners AI Score7.7

CVSS 3.17.5

EPSS0.00244

SSVC

CWE-494