6.5
Medium
CVE-2023-46144 A download of code without integrity check vulnerability in PLCnext products allows an remote attacker with low…
Description
A download of code without integrity check vulnerability in PLCnext products allows an remote attacker with low privileges to compromise integrity on the affected engineering station and the connected devices.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| AXC F 1152 2024.0 | earliest → 2024.0 | No fix stated |
| AXC F 2152 2024.0 | earliest → 2024.0 | No fix stated |
| AXC F 3152 2024.0 | earliest → 2024.0 | No fix stated |
| BPC 9102S 2024.0 | earliest → 2024.0 | No fix stated |
| EPC 1502 2024.0 | earliest → 2024.0 | No fix stated |
| EPC 1522 2024.0 | earliest → 2024.0 | No fix stated |
| PLCnext Engineer 2024.0 | earliest → 2024.0 | No fix stated |
| RFC 4072R 2024.0 | earliest → 2024.0 | No fix stated |
| RFC 4072S 2024.0 | earliest → 2024.0 | No fix stated |
Other CVEs of AXC F 1152
The 11 CVEs of AXC F 1152 →
CVE-2025-41771
An authenticated attacker with low privileges can access an endpoint in the controller’s web interface that is…
5.3
Medium
CVE-2025-41770
An unauthenticated denial-of-service vulnerability in the device's PLCnext Engineer communication interface allow an…
8.7
High
CVE-2025-41769
The device's PROFINET service is affected by a buffer overflow vulnerability that exists in the default configuration
9.3
Critical
CVE-2025-41669
The Web-based Management allows a remote low privileged Engineer user to install additional APPs on the device…
8.7
High