MULTIPROG vulnerabilities

3 known vulnerabilities in MULTIPROG from Phoenix Contact. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  MULTIPROG: Download of Code Without Integrity Check

  CVE-2023-5592Dec 14, 2023Phoenix Contact

  Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT MULTIPROG, PHOENIX CONTACT ProConOS eCLR (SDK) allows an unauthenticated remote attacker to download and execute applications without integrity checks on the device which may result in a

• 9.8 Critical severity

  MULTIPROG: Incorrect Permission Assignment for Critical Resource

  CVE-2023-0757Dec 14, 2023Phoenix Contact

  Incorrect Permission Assignment for Critical Resource vulnerability in PHOENIX CONTACT MULTIPROG, PHOENIX CONTACT ProConOS eCLR (SDK) allows an unauthenticated remote attacker to upload arbitrary malicious code and gain full access on the affected device.

• 10.0 High severity

  MULTIPROG: Insufficient Verification of Data Authenticity

  CVE-2022-31801Jun 21, 2022Phoenix ContactEPSS 1.16%

  An unauthenticated, remote attacker could upload malicious logic to the devices based on ProConOS/ProConOS eCLR in order to gain full control over the device.