Approved changes feed: RSS · Atom
cpe:2.3:a:phoenix_contact:multiprog:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Phoenix Contact (bcce83d0-b267-5887-ab90-2a4405e0861d) |
|---|---|
| Product | Multiprog (1d4e1894-9302-5962-b442-39634b724bbb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-5592 |
vulnerable | 2026-06-08 06:19:44.089581 |
Phoenix Contact: ProConOs prone to Download of Code Without Integrity Check
HIGH (7.5)
Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT MULTIPROG, PHOENIX CONTACT ProConOS eCLR (SDK) allows an unauthenticated remote attacker to download and execute applications without integrity checks on the device which may result in a complete loss of integrity.
Published: 2023-12-14T14:04:41.083Z
Updated: 2024-08-02T08:07:31.902Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0757 |
vulnerable | 2026-06-08 05:52:32.551087 |
Phoenix Contact ProConOS prone to Incorrect Permission Assignment for Critical Resource
CRITICAL (9.8)
Incorrect Permission Assignment for Critical Resource vulnerability in PHOENIX CONTACT MULTIPROG, PHOENIX CONTACT ProConOS eCLR (SDK) allows an unauthenticated remote attacker to upload arbitrary malicious code and gain full access on the affected device.
Published: 2023-12-14T14:04:10.708Z
Updated: 2024-08-02T05:24:33.525Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31801 |
vulnerable | 2026-06-08 05:44:42.331758 |
Insufficient Verification of Data Vulnerability in ProConOS/ProConOS eCLR SDK and MULTIPROG Engineering tool
CRITICAL (9.8)
An unauthenticated, remote attacker could upload malicious logic to the devices based on ProConOS/ProConOS eCLR in order to gain full control over the device.
Published: 2022-06-21T08:00:31.688Z
Updated: 2026-06-02T20:16:11.339Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9195 |
vulnerable | 2026-06-08 05:06:11.074217 |
Phoenix Contact Software ProConOs and MultiProg Missing Authentication for Critical Function
Phoenix Contact ProConOs and MultiProg do not require authentication, which allows remote attackers to execute arbitrary commands via protocol-compliant traffic.
Published: 2015-01-17T02:00:00.000Z
Updated: 2025-09-05T21:03:14.656Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.