[ CVE-2023-46143 · Published 14 Dec 2023 ]

Vulnerability in PHOENIX CONTACT Automation Worx Software Suite

CVSS 7.5 EPSS <1%1 agency advisoryNo fix listed yet

[ Description ]Official description

Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT classic line PLCs allows an unauthenticated remote attacker to modify some or all applications on a PLC.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

BSI CERT-Bund29 Sep 2026WID-SEC-2026-3658

Hitachi Energy RTU500: Multiple vulnerabilities Translated from German
CVE-2023-46143CVE-2010-2965CVE-2026-8065+3 more CVEs

[ References ]References

cert.vde.com/en/advisories/VDE-2023-057

[ Facts ]Key facts

CVE: CVE-2023-46143
EUVD: EUVD-2023-50386
Published: 14 Dec 2023, 14:06 UTC
Updated: 22 May 2025, 17:39 UTC
NVD status: Published (CVE record)
CVSS 3.1: 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Scored by CERTVDE
EPSS: 0.33% chance of exploitation in 30 days · higher than 25% of CVEs
CISA SSVC: Exploitation: none · Automatable: yes · Impact: partial
Weakness: CWE-494

[ Affected ]Affected products

PHOENIX CONTACT Automation Worx Software Suiteall
PHOENIX CONTACT AXC 1050all
PHOENIX CONTACT AXC 1050 XCall
PHOENIX CONTACT AXC 3050all
PHOENIX CONTACT Config+all
PHOENIX CONTACT FC 350 PCI ETHall
PHOENIX CONTACT ILC1x0all
PHOENIX CONTACT ILC1x1all
PHOENIX CONTACT ILC 3xxall
PHOENIX CONTACT PC Worxall
PHOENIX CONTACT PC Worx Expressall
PHOENIX CONTACT PC WORX RT BASICall

[ Description ]Official description

[ Fixes ]Fixes and patches

[ Advisories ]Government CERT advisories

Hitachi Energy RTU500: Multiple vulnerabilities Translated from German

[ References ]References