Show filters
5 Total Results
Displaying 1-5 of 5
Sort by:
Attacker Value
Unknown

CVE-2023-46144

Disclosure Date: December 14, 2023 (last updated October 01, 2024)
A download of code without integrity check vulnerability in PLCnext products allows an remote attacker with low privileges to compromise integrity on the affected engineering station and the connected devices.
Attacker Value
Unknown

CVE-2023-46142

Disclosure Date: December 14, 2023 (last updated December 22, 2023)
A incorrect permission assignment for critical resource vulnerability in PLCnext products allows an remote attacker with low privileges to gain full access on the affected devices.
Attacker Value
Unknown

CVE-2021-34570

Disclosure Date: August 03, 2021 (last updated November 28, 2024)
Multiple Phoenix Contact PLCnext control devices in versions prior to 2021.0.5 LTS are prone to a DoS attack through special crafted JSON requests.
Attacker Value
Unknown

CVE-2019-10998

Disclosure Date: June 18, 2019 (last updated November 27, 2024)
An issue was discovered on Phoenix Contact AXC F 2152 (No.2404267) before 2019.0 LTS and AXC F 2152 STARTERKIT (No.1046568) before 2019.0 LTS devices. Unlimited physical access to the PLC may lead to a manipulation of SD cards data. SD card manipulation may lead to an authentication bypass opportunity.
0
Attacker Value
Unknown

CVE-2019-10997

Disclosure Date: June 17, 2019 (last updated November 27, 2024)
An issue was discovered on Phoenix Contact AXC F 2152 (No.2404267) before 2019.0 LTS and AXC F 2152 STARTERKIT (No.1046568) before 2019.0 LTS devices. Protocol Fuzzing on PC WORX Engineer by a man in the middle attacker stops the PLC service. The device must be rebooted, or the PLC service must be restarted manually via a Linux shell.
0