Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2023-5592

Phoenix Contact: ProConOs prone to Download of Code Without Integrity Check

Description

Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT MULTIPROG, PHOENIX CONTACT ProConOS eCLR (SDK) allows an unauthenticated remote attacker to download and execute applications without integrity checks on the device which may result in a complete loss of integrity.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PHOENIX CONTACT MULTIPROG

Default version status: unaffected

  • allaffected

PHOENIX CONTACT ProConOS eCLR (SDK)

Default version status: unaffected

  • allaffected

References