Description
Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT classic line PLCs allows an unauthenticated remote attacker to modify some or all applications on a PLC.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| PHOENIX CONTACT | Automation Worx Software Suite | all | — |
| PHOENIX CONTACT | AXC 1050 | all | — |
| PHOENIX CONTACT | AXC 1050 XC | all | — |
| PHOENIX CONTACT | AXC 3050 | all | — |
| PHOENIX CONTACT | Config+ | all | — |
| PHOENIX CONTACT | FC 350 PCI ETH | all | — |
| PHOENIX CONTACT | ILC1x0 | all | — |
| PHOENIX CONTACT | ILC1x1 | all | — |
| PHOENIX CONTACT | ILC 3xx | all | — |
| PHOENIX CONTACT | PC Worx | all | — |
| PHOENIX CONTACT | PC Worx Express | all | — |
| PHOENIX CONTACT | PC WORX RT BASIC | all | — |
| PHOENIX CONTACT | PC WORX SRT | all | — |
| PHOENIX CONTACT | RFC 430 ETH-IB | all | — |
| PHOENIX CONTACT | RFC 450 ETH-IB | all | — |
| PHOENIX CONTACT | RFC 460R PN 3TX | all | — |
| PHOENIX CONTACT | RFC 470S PN 3TX | all | — |
| PHOENIX CONTACT | RFC 480S PN 4TX | all | — |
Advisories 3
- ICSA-26-279-06 Hitachi Energy RTU500 CISA ICS & IT advisories · Oct 6, 2026
- WID-SEC-2026-3658 Hitachi Energy RTU500: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 29, 2026
- VDE-2023-057 Phoenix Contact: Classic line industrial controllers prone to inadequate integrity check of PLC CERT@VDE · Jun 5, 2025