Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2022-31801

Insufficient Verification of Data Vulnerability in ProConOS/ProConOS eCLR SDK and MULTIPROG Engineering tool

Description

An unauthenticated, remote attacker could upload malicious logic to the devices based on ProConOS/ProConOS eCLR in order to gain full control over the device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PHOENIX CONTACT MULTIPROG

  • All Versionsaffected

PHOENIX CONTACT ProConOS

  • All Versionsaffected

PHOENIX CONTACT ProConOS eCLR

  • All Versionsaffected

References