CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:NCVE-2023-46143
High (7.5) in phoenixcontact. EPSS 0.3% chance of exploitation in the next 30 days.
Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT classic line PLCs allows an unauthenticated remote attacker to modify some or all applications on a PLC.
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 26% of CVEs (scores of 2026-10-31)
- CWE
- CWE-494
- Published
- Modified
- Record from
- the NVD, synced
Affected
- phoenixcontact:automationworx_software_suite
- phoenixcontact:axc_1050_firmware
- phoenixcontact:axc_1050_xc_firmware
- phoenixcontact:axc_3050_firmware
- phoenixcontact:config\+
- phoenixcontact:fc_350_pci_eth_firmware
- phoenixcontact:ilc1x0_firmware
- phoenixcontact:ilc1x1_firmware
- phoenixcontact:ilc_3xx_firmware
- phoenixcontact:pc_worx
- phoenixcontact:pc_worx_express
- phoenixcontact:pc_worx_rt_basic_firmware
- phoenixcontact:pc_worx_srt
- phoenixcontact:rfc_430_eth-ib_firmware
- phoenixcontact:rfc_450_eth-ib_firmware
- phoenixcontact:rfc_460r_pn_3tx_firmware
- phoenixcontact:rfc_470s_pn_3tx_firmware
- phoenixcontact:rfc_480s_pn_4tx_firmware