CVE-2023-46141: Phoenixcontact Automationworx Software Suite

Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days.

Incorrect Permission Assignment for Critical Resource vulnerability in multiple products of the PHOENIX CONTACT classic line allow an remote unauthenticated attacker to gain full access of the affected device.

Affected products

• Phoenixcontact Automationworx Software Suite: any version
• Phoenixcontact Axc 1050 Firmware: any version
• Phoenixcontact Axc 1050 Xc Firmware: any version
• Phoenixcontact Axc 3050 Firmware: any version
• Phoenixcontact Config+: any version
• Phoenixcontact Fc 350 Pci Eth Firmware: any version
• Phoenixcontact ILC1X0 Firmware: any version
• Phoenixcontact ILC1X1 Firmware: any version
• Phoenixcontact Ilc 3xx Firmware: any version
• Phoenixcontact Pc Worx: any version
• Phoenixcontact Pc Worx Express: any version
• Phoenixcontact Pc Worx Rt Basic Firmware: any version
• Phoenixcontact Pc Worx Srt: any version
• Phoenixcontact Rfc 430 Eth-Ib Firmware: any version
• Phoenixcontact Rfc 450 Eth-Ib Firmware: any version
• Phoenixcontact Rfc 460r Pn 3tx Firmware: any version
• Phoenixcontact Rfc 470s Pn 3tx Firmware: any version
• Phoenixcontact Rfc 480s Pn 4tx Firmware: any version

Published 2023-12-14. Last modified 2026-06-17.