PHOENIX CONTACT: PLCnext Control prone to download of code without integrity check
A download of code without integrity check vulnerability in PLCnext products allows an remote attacker with low privileges to compromise integrity on the affected engineering station and the connected devices.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
AXC F 1152
Vendor
PHOENIX CONTACT
Product
AXC F 1152
Platforms
Unknown
Default status
unaffected
AXC F 1152 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
Unavailable
2024.0
None listed
AXC F 2152
Vendor
PHOENIX CONTACT
Product
AXC F 2152
Platforms
Unknown
Default status
unaffected
AXC F 2152 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
Unavailable
2024.0
None listed
AXC F 3152
Vendor
PHOENIX CONTACT
Product
AXC F 3152
Platforms
Unknown
Default status
unaffected
AXC F 3152 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
Unavailable
2024.0
None listed
BPC 9102S
Vendor
PHOENIX CONTACT
Product
BPC 9102S
Platforms
Unknown
Default status
unaffected
BPC 9102S · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
Unavailable
2024.0
None listed
EPC 1502
Vendor
PHOENIX CONTACT
Product
EPC 1502
Platforms
Unknown
Default status
unaffected
EPC 1502 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
Unavailable
2024.0
None listed
EPC 1522
Vendor
PHOENIX CONTACT
Product
EPC 1522
Platforms
Unknown
Default status
unaffected
EPC 1522 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
Unavailable
2024.0
None listed
PLCnext Engineer
Vendor
PHOENIX CONTACT
Product
PLCnext Engineer
Platforms
Unknown
Default status
unaffected
PLCnext Engineer · Scoped product and version facts