Vulnerabilities

TI-2022-13693 CVE-2022-31801 · GHSA-jgp8-hj42-f7f6

Insufficient Verification of Data Vulnerability in ProConOS/ProConOS eCLR SDK and MULTIPROG Engineering tool

MEDIUM 51

An unauthenticated, remote attacker could upload malicious logic to the devices based on ProConOS/ProConOS eCLR in order to gain full control over the device.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0114 Published 2022-06-21 No fix listed CWE-345

TI-2014-07463 CVE-2014-9195 · GHSA-qp5x-q9h8-gxm5

Phoenix Contact Software ProConOs and MultiProg Missing Authentication for Critical Function

HIGH 83

Phoenix Contact ProConOs and MultiProg do not require authentication, which allows remote attackers to execute arbitrary commands via protocol-compliant traffic.

CVSS 2.0CRITICAL 10.0 Network No auth Interaction — EPSS 0.8111 Published 2015-01-17 No fix listed CWE-306

Vulnerabilities

Filters

Insufficient Verification of Data Vulnerability in ProConOS/ProConOS eCLR SDK and MULTIPROG Engineering tool

Phoenix Contact Software ProConOs and MultiProg Missing Authentication for Critical Function