Vulnerability in Phoenix Contact Automation Worx Software Suite
CVE-2023-46141
Incorrect Permission Assignment for Critical Resource vulnerability in multiple products of the PHOENIX CONTACT classic line allow an remote unauthenticated attacker to gain full access of the affected device.
EPSS: 0.009 (55.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Phoenix Contact Automation Worx Software Suite — versions all
- Phoenix Contact Axc 1050 — versions all
- Phoenix Contact Axc 1050 Xc — versions all
- Phoenix Contact Axc 3050 — versions all
- Phoenix Contact Config+ — versions all
- Phoenix Contact Fc 350 Pci Eth — versions all
- Phoenix Contact Ilc1x0 — versions all
- Phoenix Contact Ilc1x1 — versions all
- Phoenix Contact Ilc 3xx — versions all
- Phoenix Contact Pc Worx — versions all
Weakness classification (CWE)
References
- info@cert.vde.com (Third Party Advisory)
Frequently asked questions
- What is CVE-2023-46141?
- CVE-2023-46141 is a critical-severity vulnerability in Phoenix Contact Automation Worx Software Suite, classified under Incorrect Permission Assignment for Critical Resource. CVSS score: 9.8/10. Published 2023-12-14.
- How severe is CVE-2023-46141?
- Critical severity. CVSS v3 base score is 9.8 out of 10.