CVE-2022-31801 — Insufficient Verification of Data Vulnerability in ProConOS/ProConOS eCLR SDK and MULTIPROG Engineering tool

CVE-2022-31801

Insufficient Verification of Data Vulnerability in ProConOS/ProConOS eCLR SDK and MULTIPROG Engineering tool PUBLISHED

Description (CNA)

An unauthenticated, remote attacker could upload malicious logic to the devices based on ProConOS/ProConOS eCLR in order to gain full control over the device.

Affected (CNA)

Vendor / product	Versions
PHOENIX CONTACT / MULTIPROG	affected All Versions
PHOENIX CONTACT / ProConOS	affected All Versions
PHOENIX CONTACT / ProConOS eCLR	affected All Versions

CWE

CWE-345

References

https://cert.vde.com/en/advisories/VDE-2022-026/

ADP enrichment

CVE

No English description supplied.

https://cert.vde.com/en/advisories/VDE-2022-026/

CISA-ADP

No English description supplied.

No references supplied.