Secuno
ENNL
Book demo

CVE-2023-46141

Phoenix Contact Automationworx Software Suite vulnerability

9.8 CRITICALEPSS 0.88%
  1. Published14 Dec 2023

Description

Incorrect Permission Assignment for Critical Resource vulnerability in multiple products of the PHOENIX CONTACT classic line allow an remote unauthenticated attacker to gain full access of the affected device.

CVSS 3.1 breakdown

Attack vectorNetwork
Attack complexityLow
Privileges requiredNone
User interactionNone
ScopeUnchanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Phoenix Contact Automationworx Software Suiteall versions
Phoenix Contact Config+all versions
Phoenix Contact Pc Worxall versions
Phoenix Contact Pc Worx Expressall versions
Phoenix Contact Pc Worx Srtall versions
Phoenix Contact Axc 1050 Firmwareall versions
Phoenix Contact Axc 1050 Xc Firmwareall versions
Phoenix Contact Axc 3050 Firmwareall versions
Phoenix Contact Fc 350 Pci Eth Firmwareall versions
Phoenix Contact Ilc1x0 Firmwareall versions
Phoenix Contact Ilc1x1 Firmwareall versions
Phoenix Contact Ilc 3xx Firmwareall versions
Phoenix Contact Pc Worx Rt Basic Firmwareall versions
Phoenix Contact Rfc 430 Eth-ib Firmwareall versions
Phoenix Contact Rfc 450 Eth-ib Firmwareall versions
Phoenix Contact Rfc 460r Pn 3tx Firmwareall versions
Phoenix Contact Rfc 470s Pn 3tx Firmwareall versions
Phoenix Contact Rfc 480s Pn 4tx Firmwareall versions

Remediation

No fixed version is recorded in the NVD data. Check the vendor advisory for the latest guidance.

Frequently asked

Is CVE-2023-46141 being actively exploited?

CVE-2023-46141 is not in the CISA KEV catalog. Its EPSS exploit probability is 0.88%.

How severe is CVE-2023-46141?

CVE-2023-46141 has a CVSS 3.1 base score of 9.8, rated critical. EPSS estimates a 0.88% probability of exploitation.

Which products are affected by CVE-2023-46141?

Affected products include Phoenix Contact Automationworx Software Suite, Phoenix Contact Config+, Phoenix Contact Pc Worx, Phoenix Contact Pc Worx Express, Phoenix Contact Pc Worx Srt, and 13 more.

How do I fix CVE-2023-46141?

Apply the vendor's patch or advisory guidance, then verify no affected versions remain across your devices.

How Secuno handles this

Secuno correlates vulnerabilities like CVE-2023-46141 against the real software inventory on every managed device, as each hourly inventory arrives. Rather than a static severity, each match is scored in context: exploit availability, EPSS, the asset's exposure, and business criticality decide where it lands in the queue. If an affected version is present anywhere across your portfolio, it surfaces automatically with a prioritised remediation path.

See how prioritisation worksBook a demo

Get Patch this first every Monday

Five vulnerabilities that matter this week, ranked on real exploitation. Plain language, one email, no spam.

You can unsubscribe with one click from every issue. We handle your details as described in our privacy policy.

Data from the NVD, CISA KEV catalog and FIRST EPSS. CVSS 3.1 base score shown where available.