VULNERABILITY INTELLIGENCE
CVE-2023-46144
CVSS score6.5 MEDIUM
EPSS probability0.31%
CISA KEVNot currently listed
Published2023-12-14
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Description
A download of code without integrity check vulnerability in PLCnext products allows an remote attacker with low privileges to compromise integrity on the affected engineering station and the connected devices.
Weakness classification
- info@cert.vde.com: CWE-494
Primary references
- info@cert.vde.com — Broken Link
- af854a3a-2127-422b-91ae-364da2661108 — Broken Link