CVE-2023-46141: Phoenix Contact: Automation Worx and classic line controllers prone to Incorrect Permission Assignment for Critical Resource
PHOENIX CONTACT · Automation Worx Software Suite
Affected: PHOENIX CONTACT Automation Worx Software Suite · Exploitation: unlikely (under 1%)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 59% of scored CVEs
DescriptionCVE.org
Incorrect Permission Assignment for Critical Resource vulnerability in multiple products of the PHOENIX CONTACT classic line allow an remote unauthenticated attacker to gain full access of the affected device.
Affected products18
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- PHOENIX CONTACT · Automation Worx Software Suiteall
- PHOENIX CONTACT · AXC 1050all
- PHOENIX CONTACT · AXC 1050 XCall
- PHOENIX CONTACT · AXC 3050all
- PHOENIX CONTACT · Config+all
- PHOENIX CONTACT · FC 350 PCI ETHall
- PHOENIX CONTACT · ILC1x0all
- PHOENIX CONTACT · ILC1x1all
- PHOENIX CONTACT · ILC 3xxall
- PHOENIX CONTACT · PC Worxall
- PHOENIX CONTACT · PC Worx Expressall
- PHOENIX CONTACT · PC WORX RT BASICall
- PHOENIX CONTACT · PC WORX SRTall
- PHOENIX CONTACT · RFC 430 ETH-IBall
- PHOENIX CONTACT · RFC 450 ETH-IBall
- PHOENIX CONTACT · RFC 460R PN 3TXall
- PHOENIX CONTACT · RFC 470S PN 3TXall
- PHOENIX CONTACT · RFC 480S PN 4TXall
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Unlikely (under 1%). EPSS under 1%, or no score yet.
- CISA KEV
- Not listed
- Public check
- No public nuclei template
- Vendor
- PHOENIX CONTACT
- Published
- December 2023
CoverageNo articles yet
No CyberSIXT article names CVE-2023-46141 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.