8.8
High
CVE-2023-46142 A incorrect permission assignment for critical resource vulnerability in PLCnext products allows an remote attacker with…
Description
A incorrect permission assignment for critical resource vulnerability in PLCnext products allows an remote attacker with low privileges to gain full access on the affected devices.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| AXC F 1152 2024.0 | earliest → 2024.0 | No fix stated |
| AXC F 2152 2024.0 | earliest → 2024.0 | No fix stated |
| AXC F 3152 2024.0 | earliest → 2024.0 | No fix stated |
| BPC 9102S 2024.0 | earliest → 2024.0 | No fix stated |
| EPC 1502 2024.0 | earliest → 2024.0 | No fix stated |
| EPC 1522 2024.0 | earliest → 2024.0 | No fix stated |
| PLCnext Engineer 2024.0 | earliest → 2024.0 | No fix stated |
| RFC 4072R 2024.0 | earliest → 2024.0 | No fix stated |
| RFC 4072S 2024.0 | earliest → 2024.0 | No fix stated |
Other CVEs of AXC F 1152
The 11 CVEs of AXC F 1152 →
CVE-2025-41771
An authenticated attacker with low privileges can access an endpoint in the controller’s web interface that is…
5.3
Medium
CVE-2025-41770
An unauthenticated denial-of-service vulnerability in the device's PLCnext Engineer communication interface allow an…
8.7
High
CVE-2025-41769
The device's PROFINET service is affected by a buffer overflow vulnerability that exists in the default configuration
9.3
Critical
CVE-2025-41669
The Web-based Management allows a remote low privileged Engineer user to install additional APPs on the device…
8.7
High