Approved changes feed: RSS · Atom

cpe:2.3:a:phoenixcontact:multiprog:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPhoenixcontact (ad43784c-598b-51b1-a640-9cd70ab4c265)
ProductMultiprog (97dd5296-4a93-536e-a05c-ededf36e367c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-5592 vulnerable 2026-06-08 06:19:44.091569 Phoenix Contact: ProConOs prone to Download of Code Without Integrity Check
HIGH (7.5)
Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT MULTIPROG, PHOENIX CONTACT ProConOS eCLR (SDK) allows an unauthenticated remote attacker to download and execute applications without integrity checks on the device which may result in a complete loss of integrity.
Published: 2023-12-14T14:04:41.083Z
Updated: 2024-08-02T08:07:31.902Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0757 vulnerable 2026-06-08 05:52:32.558823 Phoenix Contact ProConOS prone to Incorrect Permission Assignment for Critical Resource
CRITICAL (9.8)
Incorrect Permission Assignment for Critical Resource vulnerability in PHOENIX CONTACT MULTIPROG, PHOENIX CONTACT ProConOS eCLR (SDK) allows an unauthenticated remote attacker to upload arbitrary malicious code and gain full access on the affected device.
Published: 2023-12-14T14:04:10.708Z
Updated: 2024-08-02T05:24:33.525Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-31801 vulnerable 2026-06-08 05:44:42.334390 Insufficient Verification of Data Vulnerability in ProConOS/ProConOS eCLR SDK and MULTIPROG Engineering tool
CRITICAL (9.8)
An unauthenticated, remote attacker could upload malicious logic to the devices based on ProConOS/ProConOS eCLR in order to gain full control over the device.
Published: 2022-06-21T08:00:31.688Z
Updated: 2026-06-02T20:16:11.339Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.