ProConOS eCLR (SDK) vulnerabilities

2 known vulnerabilities in ProConOS eCLR (SDK) from Phoenix Contact. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  MULTIPROG: Download of Code Without Integrity Check

  CVE-2023-5592Dec 14, 2023Phoenix Contact

  Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT MULTIPROG, PHOENIX CONTACT ProConOS eCLR (SDK) allows an unauthenticated remote attacker to download and execute applications without integrity checks on the device which may result in a

• 9.8 Critical severity

  MULTIPROG: Incorrect Permission Assignment for Critical Resource

  CVE-2023-0757Dec 14, 2023Phoenix Contact

  Incorrect Permission Assignment for Critical Resource vulnerability in PHOENIX CONTACT MULTIPROG, PHOENIX CONTACT ProConOS eCLR (SDK) allows an unauthenticated remote attacker to upload arbitrary malicious code and gain full access on the affected device.