FC 350 PCI ETH vulnerabilities

3 known vulnerabilities in FC 350 PCI ETH from Phoenix Contact. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Automation Worx Software Suite: Download of Code Without Integrity Check

  CVE-2023-46143Dec 14, 2023Phoenix Contact

  Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT classic line PLCs allows an unauthenticated remote attacker to modify some or all applications on a PLC.

• 9.8 Critical severity

  Automation Worx Software Suite: Incorrect Permission Assignment for Critical Resource

  CVE-2023-46141Dec 14, 2023Phoenix Contact

  Incorrect Permission Assignment for Critical Resource vulnerability in multiple products of the PHOENIX CONTACT classic line allow an remote unauthenticated attacker to gain full access of the affected device.

• 10.0 High severity

  ILC 1x0: Insufficient Verification of Data Authenticity

  CVE-2022-31800Jun 21, 2022Phoenix ContactEPSS 1.6%

  An unauthenticated, remote attacker could upload malicious logic to devices based on ProConOS/ProConOS eCLR in order to gain full control over the device.