Skip to content
OpenAdvisories
Critical · 9.8 CVE-2023-46141 EUVD-2023-50384GHSA-c4vw-934c-jc76

Phoenix Contact: Automation Worx and classic line controllers prone to Incorrect Permission Assignment for Critical Resource

Published Dec 14, 2023 · Updated Aug 2, 2024 · Assigned by CERTVDE

Description

Incorrect Permission Assignment for Critical Resource vulnerability in multiple products of the PHOENIX CONTACT classic line allow an remote unauthenticated attacker to gain full access of the affected device.

Affected products

VendorProductAffectedFixed
PHOENIX CONTACT Automation Worx Software Suite all —
PHOENIX CONTACT AXC 1050 all —
PHOENIX CONTACT AXC 1050 XC all —
PHOENIX CONTACT AXC 3050 all —
PHOENIX CONTACT Config+ all —
PHOENIX CONTACT FC 350 PCI ETH all —
PHOENIX CONTACT ILC1x0 all —
PHOENIX CONTACT ILC1x1 all —
PHOENIX CONTACT ILC 3xx all —
PHOENIX CONTACT PC Worx all —
PHOENIX CONTACT PC Worx Express all —
PHOENIX CONTACT PC WORX RT BASIC all —
PHOENIX CONTACT PC WORX SRT all —
PHOENIX CONTACT RFC 430 ETH-IB all —
PHOENIX CONTACT RFC 450 ETH-IB all —
PHOENIX CONTACT RFC 460R PN 3TX all —
PHOENIX CONTACT RFC 470S PN 3TX all —
PHOENIX CONTACT RFC 480S PN 4TX all —

Advisories 1

References