CVE-2022-31801

CWE-3453 documents3 sources
Severity
9.8CRITICAL
EPSS
0.7%
top 28.43%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Phoenix Contact MultiprogPhoenix Contact ProconosPhoenix Contact Proconos Eclr
Timeline
PublishedJun 21
Latest updateJun 22

Description

An unauthenticated, remote attacker could upload malicious logic to the devices based on ProConOS/ProConOS eCLR in order to gain full control over the device.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages3 packages

▶CVEListV5phoenix_contact/proconos_eclrAll Versions
▶CVEListV5phoenix_contact/proconosAll Versions
▶CVEListV5phoenix_contact/multiprogAll Versions

🔴Vulnerability Details

2
GHSA
GHSA-jgp8-hj42-f7f6: An unauthenticated, remote attacker could upload malicious logic to the devices based on ProConOS/ProConOS eCLR in order to gain full control over the↗2022-06-22
▶
CVEList
Insufficient Verification of Data Vulnerability in ProConOS/ProConOS eCLR SDK and MULTIPROG Engineering tool↗2022-06-21
▶
CVE-2022-31801 (CRITICAL CVSS 9.8) | An unauthenticated | cvebase.io