PHOENIX CONTACT: Insufficient Read and Write Protection to Logic and Runtime Data in PLCnext Control

CVE-2023-46142

What is CVE-2023-46142?

A vulnerability in PLCnext products by Phoenix Contact arises from incorrect permission assignments for critical resources. This flaw allows remote attackers with low privileges to exploit the vulnerability and gain full access to the affected devices, potentially compromising system integrity and security.

References