Incorrect Permission Assignment for Critical Resource vulnerability in multiple products of the PHOENIX CONTACT classic line allow an remote unauthenticated attacker to gain full access of the affected device.
Incorrect Permission Assignment for Critical Resource vulnerability in multiple products of the PHOENIX CONTACT classic line allow an remote unauthenticated attacker to gain full access of the affected device.
| Vendor | Product | Versions |
|---|---|---|
| PHOENIX CONTACT | Automation Worx Software Suite | all |
| PHOENIX CONTACT | AXC 1050 | all |
| PHOENIX CONTACT | AXC 1050 XC | all |
| PHOENIX CONTACT | AXC 3050 | all |
| PHOENIX CONTACT | Config+ | all |
| PHOENIX CONTACT | FC 350 PCI ETH | all |
| PHOENIX CONTACT | ILC1x0 | all |
| PHOENIX CONTACT | ILC1x1 | all |
| PHOENIX CONTACT | ILC 3xx | all |
| PHOENIX CONTACT | PC Worx | all |
| PHOENIX CONTACT | PC Worx Express | all |
| PHOENIX CONTACT | PC WORX RT BASIC | all |
| PHOENIX CONTACT | PC WORX SRT | all |
| PHOENIX CONTACT | RFC 430 ETH | IB — all |
| PHOENIX CONTACT | RFC 450 ETH | IB — all |
| PHOENIX CONTACT | RFC 460R PN 3TX | all |
| PHOENIX CONTACT | RFC 470S PN 3TX | all |
| PHOENIX CONTACT | RFC 480S PN 4TX | all |
Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.
For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.
Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.
No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.