Critical · 9.8 CVE-2022-31800 EUVD-2022-53189GHSA-m7x4-j34m-52hc

Insufficient Verification of Data Vulnerability in PHOENIX CONTACT classic line industrial controllers

Published Jun 21, 2022 · Updated Jun 2, 2026 · Assigned by CERTVDE

Vendor: Phoenix Contact Product: AXC 1050 Product: AXC 1050 XC Product: AXC 3050 Product: FC 350 PCI ETH Product: ILC 1x0 Product: ILC 1x1 Product: ILC 1x1 GSM/GPRS Product: ILC 3xx Product: PC WORX RT BASIC Product: PC WORX SRT Product: RFC 430 ETH-IB Product: RFC 450 ETH-IB Product: RFC 460R PN 3TX Product: RFC 460R PN 3TX-S Product: RFC 470 PN 3TX Product: RFC 470S PN 3TX Product: RFC 480S PN 4TX Category: ICS / OT

Description

An unauthenticated, remote attacker could upload malicious logic to devices based on ProConOS/ProConOS eCLR in order to gain full control over the device.

Affected products

Vendor	Product	Affected	Fixed
PHOENIX CONTACT	ILC 1x0	All Versions	—
PHOENIX CONTACT	ILC 1x1	All Versions	—
PHOENIX CONTACT	ILC 1x1 GSM/GPRS	All Versions	—
PHOENIX CONTACT	ILC 3xx	All Versions	—
PHOENIX CONTACT	AXC 1050	All Versions	—
PHOENIX CONTACT	AXC 1050 XC	All Versions	—
PHOENIX CONTACT	AXC 3050	All Versions	—
PHOENIX CONTACT	RFC 480S PN 4TX	All Versions	—
PHOENIX CONTACT	RFC 470 PN 3TX	All Versions	—
PHOENIX CONTACT	RFC 470S PN 3TX	All Versions	—
PHOENIX CONTACT	RFC 460R PN 3TX	All Versions	—
PHOENIX CONTACT	RFC 460R PN 3TX-S	All Versions	—
PHOENIX CONTACT	RFC 430 ETH-IB	All Versions	—
PHOENIX CONTACT	RFC 450 ETH-IB	All Versions	—
PHOENIX CONTACT	PC WORX SRT	All Versions	—
PHOENIX CONTACT	PC WORX RT BASIC	All Versions	—
PHOENIX CONTACT	FC 350 PCI ETH	All Versions	—

Advisories 2

VDE-2022-025 PHOENIX CONTACT: Vulnerability in classic line industrial controllers CERT@VDE · May 22, 2025
ICSA-22-172-03 Phoenix Contact Classic Line Controllers CISA ICS & IT advisories · Jun 21, 2022

References

https://cert.vde.com/en/advisories/VDE-2022-025/