GCVE - cpe:2.3:h:phoenixcontact:ilc1x0:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:phoenixcontact:ilc1x0:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Phoenixcontact (`ad43784c-598b-51b1-a640-9cd70ab4c265`)
Product	Ilc1X0 (`5cc1e6f2-7a34-57d7-b299-9c02a6c53cda`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-46143`	not_vulnerable	2026-06-08 06:12:44.021435	Phoenix Contact: Classic line industrial controllers prone to inadequate integrity check of PLC HIGH (7.5) Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT classic line PLCs allows an unauthenticated remote attacker to modify some or all applications on a PLC. Published: 2023-12-14T14:06:06.479Z Updated: 2025-05-22T17:39:45.716Z Open on db.gcve.eu Reference links https://cert.vde.com/en/advisories/VDE-2023-057/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-46141`	not_vulnerable	2026-06-08 06:12:43.971825	Phoenix Contact: Automation Worx and classic line controllers prone to Incorrect Permission Assignment for Critical Resource CRITICAL (9.8) Incorrect Permission Assignment for Critical Resource vulnerability in multiple products of the PHOENIX CONTACT classic line allow an remote unauthenticated attacker to gain full access of the affected device. Published: 2023-12-14T14:05:11.292Z Updated: 2024-08-02T20:37:39.537Z Open on db.gcve.eu Reference links https://cert.vde.com/en/advisories/VDE-2023-055/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-31800`	not_vulnerable	2026-06-08 05:44:42.305203	Insufficient Verification of Data Vulnerability in PHOENIX CONTACT classic line industrial controllers CRITICAL (9.8) An unauthenticated, remote attacker could upload malicious logic to devices based on ProConOS/ProConOS eCLR in order to gain full control over the device. Published: 2022-06-21T08:00:19.264Z Updated: 2026-06-02T20:15:56.406Z Open on db.gcve.eu Reference links https://cert.vde.com/en/advisories/VDE-2022-025/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-33541`	not_vulnerable	2026-06-08 05:32:11.637562	Phoenix Contact: ILC1x Industrial controllers affected by Denial-of-Service vulnerability HIGH (7.5) Phoenix Contact Classic Line Controllers ILC1x0 and ILC1x1 in all versions/variants are affected by a Denial-of-Service vulnerability. The communication protocols and device access do not feature authentication measures. Remote attackers can use specially crafted IP packets to cause a denial of service on the PLC's network communication module. A successful attack stops all network communication. To restore the network connectivity the device needs to be restarted. The automation task is not affected. Published: 2021-06-25T18:26:05.564Z Updated: 2024-09-16T23:21:50.885Z Open on db.gcve.eu Reference links https://cert.vde.com/en-us/advisories/vde-2021-019	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.