Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2022-31801

Insufficient Verification of Data Vulnerability in ProConOS/ProConOS eCLR SDK and MULTIPROG Engineering tool

An unauthenticated, remote attacker could upload malicious logic to the devices based on ProConOS/ProConOS eCLR in order to gain full control over the device.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Phoenixcontact Phoenixcontact-software
Products
Multiprog Proconos Proconos Eclr
CVE-2023-5592

Phoenix Contact: ProConOs prone to Download of Code Without Integrity Check

Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT MULTIPROG, PHOENIX CONTACT ProConOS eCLR (SDK) allows an unauthenticated remote attacker to download and execute applications without integrity checks on the device which may result in a complete loss of integrity.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Phoenixcontact
Products
Multiprog Proconos Eclr
CVE-2023-0757

Phoenix Contact ProConOS prone to Incorrect Permission Assignment for Critical Resource

Incorrect Permission Assignment for Critical Resource vulnerability in PHOENIX CONTACT MULTIPROG, PHOENIX CONTACT ProConOS eCLR (SDK) allows an unauthenticated remote attacker to upload arbitrary malicious code and gain full access on the affected device.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Phoenixcontact
Products
Multiprog Proconos Eclr