CVE-2023-46142 | Phoenix Contact AXC F 1152 up to 2024.0 Permissions permission assignment (VDE-2023-056)

A vulnerability was found in Phoenix Contact AXC F 1152, AXC F 2152, AXC F 3152, BPC 9102S, EPC 1502, EPC 1522, PLCnext Engineer, RFC 4072R and RFC 4072S up to 2024.0. It has been declared as very critical. This vulnerability affects unknown code of the component Permissions Handler. The manipulation leads to incorrect permission assignment.

This vulnerability was named CVE-2023-46142. The attack can be initiated remotely. There is no exploit available.