Skip to content
OpenAdvisories
High · 7.5 CVE-2023-5592 EUVD-2023-57885GHSA-f98h-m8p3-7jp3

Phoenix Contact: ProConOs prone to Download of Code Without Integrity Check

Published Dec 14, 2023 · Updated Aug 2, 2024 · Assigned by CERTVDE

Description

Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT MULTIPROG, PHOENIX CONTACT ProConOS eCLR (SDK) allows an unauthenticated remote attacker to download and execute applications without integrity checks on the device which may result in a complete loss of integrity.

Affected products

VendorProductAffectedFixed
PHOENIX CONTACT MULTIPROG all —
PHOENIX CONTACT ProConOS eCLR (SDK) all —

Advisories 1

References