Skip to content
OpenAdvisories

Product · Phoenix Contact

PLCnext Engineer

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.2
    CVE-2026-110021

    Missing GSDX SignatureValue verification

    PLCnext Engineer checks GSDX manifest reference digests but does not cryptographically verify the XML `SignatureValue` over canonicalized `SignedInfo`. An unauthenticated local attacker can modify signed GSDML content, update its manifest digest, retain the p…

    Phoenix Contact PLCnext Engineer ICS / OT
  • Medium 6.5
    CVE-2023-46144

    PHOENIX CONTACT: PLCnext Control prone to download of code without integrity check

    A download of code without integrity check vulnerability in PLCnext products allows an remote attacker with low privileges to compromise integrity on the affected engineering station and the connected devices.

    Phoenix Contact AXC F 2152 BPC 9102S AXC F 1152 ICS / OT