2023-12-14 15:00:31 +00:00
{
"id" : "CVE-2023-46143" ,
"sourceIdentifier" : "info@cert.vde.com" ,
"published" : "2023-12-14T14:15:43.207" ,
2023-12-21 19:00:28 +00:00
"lastModified" : "2023-12-21T17:15:46.577" ,
"vulnStatus" : "Analyzed" ,
2023-12-14 15:00:31 +00:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT classic line PLCs allows an unauthenticated remote attacker to modify some or all applications on a PLC."
2023-12-21 19:00:28 +00:00
} ,
{
"lang" : "es" ,
"value" : "La vulnerabilidad de descarga de c\u00f3digo sin verificaci\u00f3n de integridad en los PLC de la l\u00ednea cl\u00e1sica de PHOENIX CONTACT permite que un atacante remoto no autenticado modifique algunas o todas las aplicaciones en un PLC."
2023-12-14 15:00:31 +00:00
}
] ,
"metrics" : {
"cvssMetricV31" : [
{
"source" : "info@cert.vde.com" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" ,
"attackVector" : "NETWORK" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "NONE" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "NONE" ,
"integrityImpact" : "HIGH" ,
"availabilityImpact" : "NONE" ,
"baseScore" : 7.5 ,
"baseSeverity" : "HIGH"
} ,
"exploitabilityScore" : 3.9 ,
"impactScore" : 3.6
}
]
} ,
"weaknesses" : [
{
"source" : "info@cert.vde.com" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-494"
}
]
}
] ,
2023-12-21 19:00:28 +00:00
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:phoenixcontact:automationworx_software_suite:*:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "9797B615-825F-4CAA-B36E-5161E37FAF9A"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:phoenixcontact:axc_1050_firmware:*:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "F0D586DC-2274-4A32-AE98-7BE174C230CC"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:phoenixcontact:axc_1050:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "5F55C821-DAA6-4098-BB54-80F6D9ED0CD6"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:phoenixcontact:axc_1050_xc_firmware:*:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "332A6164-CDC1-4DBF-9B62-946EC7D7C4B3"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:phoenixcontact:axc_1050_xc:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "E03B5234-36FA-4BCE-964D-F55FFFD5CAAC"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:phoenixcontact:axc_3050_firmware:*:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "84066F7B-8306-4743-9F12-75B8F880AD93"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:phoenixcontact:axc_3050:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "CB9699A2-782D-40F3-B8D6-3C315104BA60"
}
]
}
]
} ,
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:phoenixcontact:config\\+:*:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "A6D8FDB6-6181-49EB-BE6D-236D39A478A1"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:phoenixcontact:fc_350_pci_eth_firmware:*:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "DEB7CA5B-7EEF-4E0E-9A53-83FE28730852"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:phoenixcontact:fc_350_pci_eth:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "F4BB6654-41BB-488E-AC8C-E74C05CA198F"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:phoenixcontact:ilc1x0_firmware:*:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "5AC07A81-D5D6-449C-93F8-93D6E87487DD"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:phoenixcontact:ilc1x0:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "AE45F6AF-7286-48F7-B4BE-AFC948884C7C"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:phoenixcontact:ilc1x1_firmware:*:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "8E168AB1-1B81-4990-95E4-56C36275609B"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:phoenixcontact:ilc1x1:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "9E318A8B-D1D1-4DD5-AF71-DCBFEFCF2C5E"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:phoenixcontact:ilc_3xx_firmware:*:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "65E1A201-E7B1-452B-8BC6-A355A3BF9460"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:phoenixcontact:ilc_3xx:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "FF1C58A6-5220-4509-B426-D1ED5ECFAD05"
}
]
}
]
} ,
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:phoenixcontact:pc_worx:*:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "B975C4E4-83B5-4C98-811B-E6D13687AB85"
}
]
}
]
} ,
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:phoenixcontact:pc_worx_express:*:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "CE663FFA-4B82-4477-A424-4C9CC83C131E"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:phoenixcontact:pc_worx_rt_basic_firmware:*:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "8693B231-3A5C-47B7-BEA5-53D430BBACF4"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:phoenixcontact:pc_worx_rt_basic:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "08B214FC-776F-454B-8DC4-E7F2E6EFB013"
}
]
}
]
} ,
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:phoenixcontact:pc_worx_srt:*:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "A2A6F462-A12F-4E08-9AA6-1C1AF743A645"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:phoenixcontact:rfc_430_eth-ib_firmware:*:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "643E47A5-E7AA-4321-99A1-05EEBD9A2B56"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:phoenixcontact:rfc_430_eth-ib:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "1F32F262-519C-41BB-BF31-ECBCAC1ABEA9"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:phoenixcontact:rfc_450_eth-ib_firmware:*:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "A91E019B-F0C5-4DF0-AE4C-E60F3D598F0C"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:phoenixcontact:rfc_450_eth-ib:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "C3C2EDF4-2982-4858-A960-7E7564E5B20A"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:phoenixcontact:rfc_460r_pn_3tx_firmware:*:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "302995A9-E9CC-4477-B374-CE10F16A5E10"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:phoenixcontact:rfc_460r_pn_3tx:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "F7544E2C-2E63-4C36-AB64-764B4393E377"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:phoenixcontact:rfc_470s_pn_3tx_firmware:*:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "CCAB2CA6-EEC4-4E0D-B962-FC2C4EF06013"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:phoenixcontact:rfc_470s_pn_3tx:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "CD94CBFF-CC25-4122-96FE-2308A4D1659D"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:phoenixcontact:rfc_480s_pn_4tx_firmware:*:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "3B383246-EF0A-466F-89EA-F61AFC447509"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:phoenixcontact:rfc_480s_pn_4tx:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "6B043176-58CC-438C-92D9-99F479BB1C58"
}
]
}
]
}
] ,
2023-12-14 15:00:31 +00:00
"references" : [
{
"url" : "https://cert.vde.com/en/advisories/VDE-2023-057/" ,
2023-12-21 19:00:28 +00:00
"source" : "info@cert.vde.com" ,
"tags" : [
"Third Party Advisory"
]
2023-12-14 15:00:31 +00:00
}
]
}