Approved changes feed: RSS · Atom

cpe:2.3:o:phoenixcontact:axc_f_2152_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorPhoenixcontact (ad43784c-598b-51b1-a640-9cd70ab4c265)
ProductAxc F 2152 Firmware (3ab6ae9e-89a6-5b52-938b-c04f27ad52de)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-46144 vulnerable 2026-06-08 06:12:44.024381 PHOENIX CONTACT: PLCnext Control prone to download of code without integrity check
MEDIUM (6.5)
A download of code without integrity check vulnerability in PLCnext products allows an remote attacker with low privileges to compromise integrity on the affected engineering station and the connected devices.
Published: 2023-12-14T14:08:07.244Z
Updated: 2024-10-01T06:18:18.730Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46142 vulnerable 2026-06-08 06:12:44.008529 PHOENIX CONTACT: Insufficient Read and Write Protection to Logic and Runtime Data in PLCnext Control
HIGH (8.8)
A incorrect permission assignment for critical resource vulnerability in PLCnext products allows an remote attacker with low privileges to gain full access on the affected devices.
Published: 2023-12-14T14:05:35.741Z
Updated: 2024-08-02T20:37:39.840Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10998 vulnerable 2026-06-08 05:12:26.160634 Details available
An issue was discovered on Phoenix Contact AXC F 2152 (No.2404267) before 2019.0 LTS and AXC F 2152 STARTERKIT (No.1046568) before 2019.0 LTS devices. Unlimited physical access to the PLC may lead to a manipulation of SD cards data. SD card manipulation may lead to an authentication bypass opportunity.
Published: 2019-06-18T12:10:17.000Z
Updated: 2024-08-04T22:40:15.984Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10997 vulnerable 2026-06-08 05:12:26.158317 Details available
An issue was discovered on Phoenix Contact AXC F 2152 (No.2404267) before 2019.0 LTS and AXC F 2152 STARTERKIT (No.1046568) before 2019.0 LTS devices. Protocol Fuzzing on PC WORX Engineer by a man in the middle attacker stops the PLC service. The device must be rebooted, or the PLC service must be restarted manually via a Linux shell.
Published: 2019-06-17T17:59:18.000Z
Updated: 2024-08-04T22:40:15.833Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.