Skip to content
OpenAdvisories
Critical ICSA-22-172-04 1 CVE

Phoenix Contact ProConOS and MULTIPROG

Published Jun 21, 2022 · Updated Jun 21, 2022

Vendor: Phoenix Contact Product: MultiProg Product: ProConOs Product: ProConOS eCLR

Summary

Successful exploitation of this vulnerability could allow an attacker to upload arbitrary malicious code after gaining access to the communication to products utilizing ProConOS/ProConOS eCLR or MULTIPROG.

Vulnerabilities 1

  • Critical 9.8
    CVE-2022-31801

    Insufficient Verification of Data Vulnerability in ProConOS/ProConOS eCLR SDK and MULTIPROG Engineering tool

    An unauthenticated, remote attacker could upload malicious logic to the devices based on ProConOS/ProConOS eCLR in order to gain full control over the device.

    Phoenix Contact MultiProg ProConOs ProConOS eCLR ICS / OT

Revision history

  1. #1

    Publication Date

References