PHOENIX CONTACT: PLCnext Control prone to download of code without integrity check

published 2023-12-14 2 y ago modified 2026-06-17 4 mo ago also EUVD-2023-50387

cvss: 6.5; version 3.1, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 0.3%; EPSS 0.3% chance of exploitation in 30 days, percentile 23%
public exploits: 0; none known

A download of code without integrity check vulnerability in PLCnext products allows an remote attacker with low privileges to compromise integrity on the affected engineering station and the connected devices.

Exploit prediction

0.31% chance of exploitation in the next 30 days, higher than 23% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by	version	score	vector
CNA	3.1	6.5	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Affected products

PHOENIX CONTACT AXC F 1152
PHOENIX CONTACT AXC F 2152
PHOENIX CONTACT AXC F 3152
PHOENIX CONTACT BPC 9102S
PHOENIX CONTACT EPC 1502
PHOENIX CONTACT EPC 1522
PHOENIX CONTACT PLCnext Engineer
PHOENIX CONTACT RFC 4072R
PHOENIX CONTACT RFC 4072S

Classification

Weakness

CWE-494 Download of Code Without Integrity Check

References

https //cert.vde.com/en/advisories/VDE-2023-056/
broken-link

Sources

CVE List CVE-2023-46144
NVD CVE-2023-46144

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary