CVE-2023-46142

Summary

CVE-2023-46142 is a newly disclosed vulnerability affecting PLCnext products. This issue arises from an incorrect permission assignment for a critical resource, granting remote attackers with low privileges the ability to elevate their access to full control on the affected devices. Successful exploitation can lead to unauthorized modification, disclosure, or destruction of data, potentially disrupting industrial processes and causing significant damage. Industrial organizations using PLCnext technology are advised to apply the available patch or implement alternate mitigations as soon as possible to protect against potential attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.