Advisories · Technology

PHOENIX CONTACT MULTIPROG.

Every CVE that names PHOENIX CONTACT MULTIPROG among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-5592 CVE record

CVSS 7.5 High

Phoenix Contact: ProConOs prone to Download of Code Without Integrity Check
- PHOENIX CONTACT MULTIPROG
- PHOENIX CONTACT ProConOS eCLR (SDK)
- CWE-494
Not analysed yet 14 Dec 2023
CVE-2023-0757 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Phoenix Contact ProConOS prone to Incorrect Permission Assignment for Critical Resource
- PHOENIX CONTACT MULTIPROG
- PHOENIX CONTACT ProConOS eCLR (SDK)
- Broken access control
Not analysed yet 14 Dec 2023
CVE-2022-31801 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Insufficient Verification of Data Vulnerability in ProConOS/ProConOS eCLR SDK and MULTIPROG Engineering tool
- PHOENIX CONTACT MULTIPROG
- PHOENIX CONTACT ProConOS
- CWE-345
Not analysed yet 21 Jun 2022
CVE-2014-9195 CVE record

CVSS 10.0 HighCritical · CVSS 9+, CVSS 7+ and EPSS

Phoenix Contact Software ProConOs and MultiProg Missing Authentication for Critical Function
- Phoenix Contact ProConOs
- Phoenix Contact MultiProg
- Authentication bypass
Not analysed yet 17 Jan 2015