CVE-2023-46142: Phoenixcontact Axc F 1152 Firmware

High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days.

A incorrect permission assignment for critical resource vulnerability in PLCnext products allows an remote attacker with low privileges to gain full access on the affected devices.

Affected products

• Phoenixcontact Axc F 1152 Firmware: up to and including 2024.0
• Phoenixcontact Axc F 2152 Firmware: up to and including 2024.0
• Phoenixcontact Axc F 3152 Firmware: up to and including 2024.0
• Phoenixcontact Bpc 9102s Firmware: up to and including 2024.0
• Phoenixcontact Epc 1502 Firmware: up to and including 2024.0
• Phoenixcontact Epc 1522 Firmware: up to and including 2024.0
• Phoenixcontact Plcnext Engineer: up to and including 2024.0
• Phoenixcontact Rfc 4072r Firmware: up to and including 2024.0
• Phoenixcontact Rfc 4072s Firmware: up to and including 2024.0

Published 2023-12-14. Last modified 2026-06-17.