CVE-2023-46141 | Phoenix Contact Automation Worx Software Suite permission assignment (VDE-2023-055)

A vulnerability, which was classified as very critical, was found in Phoenix Contact Automation Worx Software Suite, AXC 1050, AXC 1050 XC, AXC 3050, Config+, FC 350 PCI ETH, ILC1x0, ILC1x1, ILC 3xx, PC Worx, PC Worx Express, PC WORX RT BASIC, PC WORX SRT, RFC 430 ETH-IB, RFC 450 ETH-IB, RFC 460R PN 3TX, RFC 470S PN 3TX and RFC 480S PN 4TX. Affected is an unknown function. The manipulation leads to incorrect permission assignment.

This vulnerability is traded as CVE-2023-46141. It is possible to launch the attack remotely. There is no exploit available.