Description
An unauthenticated, remote attacker could upload malicious logic to the devices based on ProConOS/ProConOS eCLR in order to gain full control over the device.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| PHOENIX CONTACT | MULTIPROG | All Versions | — |
| PHOENIX CONTACT | ProConOS | All Versions | — |
| PHOENIX CONTACT | ProConOS eCLR | All Versions | — |
Advisories 2
- VDE-2022-026 PHOENIX CONTACT: Vulnerability in ProConOS/ProConOS eCLR SDK and MULTIPROG Engineering tool CERT@VDE · May 22, 2025
- ICSA-22-172-04 Phoenix Contact ProConOS and MULTIPROG CISA ICS & IT advisories · Jun 21, 2022