Phoenix Contact Proconos Eclr vulnerabilities
3 known vulnerabilities affecting phoenix_contact/proconos_eclr.
Total CVEs
3
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL2HIGH1
Vulnerabilities
Page 1 of 1
CVE-2023-0757P2CRITICALCVSS 9.8vall2023-12-14
CVE-2023-0757 [CRITICAL] CWE-732 CVE-2023-0757: Incorrect Permission Assignment for Critical Resource vulnerability in PHOENIX CONTACT MULTIPROG, PH
Incorrect Permission Assignment for Critical Resource vulnerability in PHOENIX CONTACT MULTIPROG, PHOENIX CONTACT ProConOS eCLR (SDK) allows an unauthenticated remote attacker to upload arbitrary malicious code and gain full access on the affected device.
nvd
CVE-2022-31801P2CRITICALCVSS 9.8vAll Versions2022-06-21
CVE-2022-31801 [CRITICAL] CWE-345 CVE-2022-31801: An unauthenticated, remote attacker could upload malicious logic to the devices based on ProConOS/Pr
An unauthenticated, remote attacker could upload malicious logic to the devices based on ProConOS/ProConOS eCLR in order to gain full control over the device.
nvd
CVE-2023-5592P3HIGHCVSS 7.5vall2023-12-14
CVE-2023-5592 [HIGH] CWE-494 CVE-2023-5592: Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT MULTIPROG, PHOENIX CONTACT
Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT MULTIPROG, PHOENIX CONTACT ProConOS eCLR (SDK) allows an unauthenticated remote attacker to download and execute applications without integrity checks on the device which may result in a complete loss of integrity.
nvd