Skip to content
CVE PROGRAM SOURCE RECORD10.0 Critical

CVE-2014-9195

Phoenix Contact Software ProConOs and MultiProg Missing Authentication for Critical Function

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

Phoenix Contact ProConOs and MultiProg do not require authentication, which allows remote attackers to execute arbitrary commands via protocol-compliant traffic.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Phoenix Contact ProConOs

Default version status: unaffected

  • All versionsaffected

Phoenix Contact MultiProg

Default version status: unaffected

  • All versionsaffected

References