Search vulnerabilities

Results 2

Export CSV
CVE-2022-31801

Insufficient Verification of Data Vulnerability in ProConOS/ProConOS eCLR SDK and MULTIPROG Engineering tool

An unauthenticated, remote attacker could upload malicious logic to the devices based on ProConOS/ProConOS eCLR in order to gain full control over the device.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
CVE-2014-9195

Phoenix Contact Software ProConOs and MultiProg Missing Authentication for Critical Function

Phoenix Contact ProConOs and MultiProg do not require authentication, which allows remote attackers to execute arbitrary commands via protocol-compliant traffic.

CVSS 2.0 · 10 Critical EPSS 81.1% KEV · Not listed