Medium severity6.5NVD Advisory· Published Dec 14, 2023· Updated Jun 17, 2026
CVE-2023-46144
CVE-2023-46144
Description
A download of code without integrity check vulnerability in PLCnext products allows an remote attacker with low privileges to compromise integrity on the affected engineering station and the connected devices.
Affected products
19cpe:2.3:a:phoenixcontact:plcnext_engineer:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:phoenixcontact:plcnext_engineer:*:*:*:*:*:*:*:*range: <=2024.0
- (no CPE)range: 0
- cpe:2.3:o:phoenixcontact:axc_f_1152_firmware:*:*:*:*:*:*:*:*Range: <=2024.0
- cpe:2.3:o:phoenixcontact:axc_f_2152_firmware:*:*:*:*:*:*:*:*Range: <=2024.0
- cpe:2.3:o:phoenixcontact:axc_f_3152_firmware:*:*:*:*:*:*:*:*Range: <=2024.0
- cpe:2.3:o:phoenixcontact:bpc_9102s_firmware:*:*:*:*:*:*:*:*Range: <=2024.0
- cpe:2.3:o:phoenixcontact:epc_1502_firmware:*:*:*:*:*:*:*:*Range: <=2024.0
- cpe:2.3:o:phoenixcontact:epc_1522_firmware:*:*:*:*:*:*:*:*Range: <=2024.0
- cpe:2.3:o:phoenixcontact:rfc_4072r_firmware:*:*:*:*:*:*:*:*Range: <=2024.0
- cpe:2.3:o:phoenixcontact:rfc_4072s_firmware:*:*:*:*:*:*:*:*Range: <=2024.0
0+ 2 more
- (no CPE)range: 0
- (no CPE)range: 0
- (no CPE)range: 0
- PHOENIX CONTACT/BPC 9102Sv5Range: 0
- PHOENIX CONTACT/EPC 1502v5Range: 0
- PHOENIX CONTACT/EPC 1522v5Range: 0
- PHOENIX CONTACT/RFC 4072Rv5Range: 0
- PHOENIX CONTACT/RFC 4072Sv5Range: 0
Patches
Vulnerability mechanics
References
1- https//cert.vde.com/en/advisories/VDE-2023-056/nvdBroken Link
News mentions
0No linked articles in our index yet.