CVE-2023-46143: Phoenixcontact Automationworx Software Suite

High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT classic line PLCs allows an unauthenticated remote attacker to modify some or all applications on a PLC.

Affected products

• Phoenixcontact Automationworx Software Suite: any version
• Phoenixcontact Axc 1050 Firmware: any version
• Phoenixcontact Axc 1050 Xc Firmware: any version
• Phoenixcontact Axc 3050 Firmware: any version
• Phoenixcontact Config+: any version
• Phoenixcontact Fc 350 Pci Eth Firmware: any version
• Phoenixcontact ILC1X0 Firmware: any version
• Phoenixcontact ILC1X1 Firmware: any version
• Phoenixcontact Ilc 3xx Firmware: any version
• Phoenixcontact Pc Worx: any version
• Phoenixcontact Pc Worx Express: any version
• Phoenixcontact Pc Worx Rt Basic Firmware: any version
• Phoenixcontact Pc Worx Srt: any version
• Phoenixcontact Rfc 430 Eth-Ib Firmware: any version
• Phoenixcontact Rfc 450 Eth-Ib Firmware: any version
• Phoenixcontact Rfc 460r Pn 3tx Firmware: any version
• Phoenixcontact Rfc 470s Pn 3tx Firmware: any version
• Phoenixcontact Rfc 480s Pn 4tx Firmware: any version

Published 2023-12-14. Last modified 2026-06-17.