Medium severity · published Dec 14, 2023
CVE-2023-46144
PHOENIX CONTACT: PLCnext Control prone to download of code without integrity check
6.5
CVSS
0.3%
EPSS
No
On KEV
Description
A download of code without integrity check vulnerability in PLCnext products allows an remote attacker with low privileges to compromise integrity on the affected engineering station and the connected devices.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 24% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AF
AXC F 1152 · PHOENIX CONTACT
through 2024.0 · source: vendor
AF
AXC F 2152 · PHOENIX CONTACT
through 2024.0 · source: vendor
AF
AXC F 3152 · PHOENIX CONTACT
through 2024.0 · source: vendor
B9
BPC 9102S · PHOENIX CONTACT
through 2024.0 · source: vendor
E1
EPC 1502 · PHOENIX CONTACT
through 2024.0 · source: vendor
E1
EPC 1522 · PHOENIX CONTACT
through 2024.0 · source: vendor
PE
PLCnext Engineer · PHOENIX CONTACT
through 2024.0 · source: vendor, NVD
R4
RFC 4072R · PHOENIX CONTACT
through 2024.0 · source: vendor
R4
RFC 4072S · PHOENIX CONTACT
through 2024.0 · source: vendor
AF
Axc F 1152 Firmware · Phoenixcontact
through 2024.0 · source: NVD
AF
Axc F 2152 Firmware · Phoenixcontact
through 2024.0 · source: NVD
AF
Axc F 3152 Firmware · Phoenixcontact
through 2024.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-46144
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-46144
Broken Link
https://https://cert.vde.com/en/advisories/VDE-2023-056/
More from AXC F 1152
9.8
CVE-2025-41769
Unauthenticated Buffer Overflow in PROFINET Service
8.8
CVE-2025-41669
Insufficient Verification of Data Authenticity
8.8
CVE-2025-41668
Phoenix Contact: File access due to the replacement of a critical file used by the service security-profile
8.8
CVE-2025-41667
Phoenix Contact: File access due to the replacement of a critical file used by the arp-preinit script
8.8
CVE-2025-41666
Phoenix Contact: File access due to the replacement of a critical file used by the watchdog