Skip to content
OpenAdvisories

Product · Phoenix Contact

MultiProg

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2023-0757

    Phoenix Contact ProConOS prone to Incorrect Permission Assignment for Critical Resource

    Incorrect Permission Assignment for Critical Resource vulnerability in PHOENIX CONTACT MULTIPROG, PHOENIX CONTACT ProConOS eCLR (SDK) allows an unauthenticated remote attacker to upload arbitrary malicious code and gain full access on the affected device.

    Phoenix Contact MultiProg ProConOS eCLR (SDK) ICS / OT
  • Critical 9.8
    CVE-2022-31801

    Insufficient Verification of Data Vulnerability in ProConOS/ProConOS eCLR SDK and MULTIPROG Engineering tool

    An unauthenticated, remote attacker could upload malicious logic to the devices based on ProConOS/ProConOS eCLR in order to gain full control over the device.

    Phoenix Contact MultiProg ProConOs ProConOS eCLR ICS / OT
  • Critical 10.0
    CVE-2014-9195 Public exploit EPSS 81%

    Phoenix Contact Software ProConOs and MultiProg Missing Authentication for Critical Function

    Phoenix Contact ProConOs and MultiProg do not require authentication, which allows remote attackers to execute arbitrary commands via protocol-compliant traffic.

    Phoenix Contact MultiProg ProConOs ICS / OT