https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 11:20:12 +0000 https://cve.radiocsirt.org/vuln/cve-2023-46141 <p><strong>Affected:</strong> PHOENIX CONTACT Automation Worx Software Suite, PHOENIX CONTACT AXC 1050, PHOENIX CONTACT AXC 1050 XC, PHOENIX CONTACT AXC 3050, PHOENIX CONTACT Config+, PHOENIX CONTACT FC 350 PCI ETH, PHOENIX CONTACT ILC1x0, PHOENIX CONTACT ILC1x1, PHOENIX CONTACT ILC 3xx, PHOENIX CONTACT PC Worx and 8 more</p> <p>Incorrect Permission Assignment for Critical Resource vulnerability in multiple products of the PHOENIX CONTACT classic line allow an remote unauthenticated attacker to gain full access of the affected device.</p> <p><strong>Affected:</strong> PHOENIX CONTACT Automation Worx Software Suite, PHOENIX CONTACT AXC 1050, PHOENIX CONTACT AXC 1050 XC, PHOENIX CONTACT AXC 3050, PHOENIX CONTACT Config+, PHOENIX CONTACT FC 350 PCI ETH, PHOENIX CONTACT ILC1x0, PHOENIX CONTACT ILC1x1, PHOENIX CONTACT ILC 3xx, PHOENIX CONTACT PC Worx and 8 more</p> <p>Incorrect Permission Assignment for Critical Resource vulnerability in multiple products of the PHOENIX CONTACT classic line allow an remote unauthenticated attacker to gain full access of the affected device.</p> https://cve.radiocsirt.org/vuln/cve-2023-46141 https://cve.radiocsirt.org/vuln/vde-2023-055 <p>Phoenix Contact classic line industrial controllers are developed and designed for the use in closed industrial networks. The controllers don&#39;t feature a function to check integrity and authenticity of the application (e.g.: logic files, executable logic, configurations). Logic files generated by Automation Worx could be manipulated on the engineering station and loaded into the PLC without tamper detection. In addition, the tampering can be done by specially designed attacks in such a way that it remains hidden, and the logic program modifies its own code, making it difficult to determine the impact of a malicious program.</p> <p>Phoenix Contact classic line industrial controllers are developed and designed for the use in closed industrial networks. The controllers don&#39;t feature a function to check integrity and authenticity of the application (e.g.: logic files, executable logic, configurations). Logic files generated by Automation Worx could be manipulated on the engineering station and loaded into the PLC without tamper detection. In addition, the tampering can be done by specially designed attacks in such a way that it remains hidden, and the logic program modifies its own code, making it difficult to determine the impact of a malicious program.</p> https://cve.radiocsirt.org/vuln/vde-2023-055