9.8
Critical
CVE-2022-31801 An unauthenticated, remote attacker could upload malicious logic to the devices based on ProConOS/ProConOS eCLR in order…
Description
An unauthenticated, remote attacker could upload malicious logic to the devices based on ProConOS/ProConOS eCLR in order to gain full control over the device.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| MultiProg | Versions not published | |
| ProConOs | Versions not published | |
| ProConOS eCLR | Versions not published |
Other CVEs of MultiProg
The 4 CVEs of MultiProg →
CVE-2023-5592
Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT MULTIPROG, PHOENIX CONTACT ProConOS eCLR (SDK)…
7.5
High
CVE-2023-0757
Incorrect Permission Assignment for Critical Resource vulnerability in PHOENIX CONTACT MULTIPROG, PHOENIX CONTACT…
9.8
Critical
CVE-2014-9195
Phoenix Contact ProConOs and MultiProg do not require authentication, which allows remote attackers to execute arbitrary…
10.0
Not rated