CVE-2023-46143CWE-494

Phoenix Contact: Classic line industrial controllers prone to inadequate integrity check of PLC

High · published December 14, 2023

CVSS v3.1
7.5
EPSS
0%
Percentile
25.1
In the wild
Unconfirmed
What it is

Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT classic line PLCs allows an unauthenticated remote attacker to modify some or all applications on a PLC.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00332 · 25.1th percentile
Weakness
CWE-494 · Download of Code Without Integrity Check
Published
2023-12-14T14:06Z
EPSS history
Timeline
  • 14 DEC 14:06Z
    Phoenix Contact: Classic line industrial controllers prone to inadequate integrity check of PLC
    cvelistv5