CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2023-46141
Critical (9.8) in phoenixcontact. EPSS 0.9% chance of exploitation in the next 30 days.
Incorrect Permission Assignment for Critical Resource vulnerability in multiple products of the PHOENIX CONTACT classic line allow an remote unauthenticated attacker to gain full access of the affected device.
Severity
- EPSS
- 0.9% chance of exploitation in the next 30 days; higher than 59% of CVEs (scores of 2026-10-31)
- CWE
- CWE-732
- Published
- Modified
- Record from
- the NVD, synced
Affected
- phoenixcontact:automationworx_software_suite
- phoenixcontact:axc_1050_firmware
- phoenixcontact:axc_1050_xc_firmware
- phoenixcontact:axc_3050_firmware
- phoenixcontact:config\+
- phoenixcontact:fc_350_pci_eth_firmware
- phoenixcontact:ilc1x0_firmware
- phoenixcontact:ilc1x1_firmware
- phoenixcontact:ilc_3xx_firmware
- phoenixcontact:pc_worx
- phoenixcontact:pc_worx_express
- phoenixcontact:pc_worx_rt_basic_firmware
- phoenixcontact:pc_worx_srt
- phoenixcontact:rfc_430_eth-ib_firmware
- phoenixcontact:rfc_450_eth-ib_firmware
- phoenixcontact:rfc_460r_pn_3tx_firmware
- phoenixcontact:rfc_470s_pn_3tx_firmware
- phoenixcontact:rfc_480s_pn_4tx_firmware