CRITICAL🇵🇱 Wersja polska

CVE-2022-31800

CVSS 9.8v3.1pub. 2022-06-21upd. 2024-11-21

An unauthenticated, remote attacker could upload malicious logic to devices based on ProConOS/ProConOS eCLR in order to gain full control over the device.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Phoenixcontact Axc 1050

    HW
    Phoenixcontact
    all versions

  • Phoenixcontact Axc 1050 Firmware

    OS
    Phoenixcontact
    all versions

  • Phoenixcontact Axc 1050 Xc

    HW
    Phoenixcontact
    all versions

  • Phoenixcontact Axc 1050 Xc Firmware

    OS
    Phoenixcontact
    all versions

  • Phoenixcontact Axc 3050

    HW
    Phoenixcontact
    all versions

  • Phoenixcontact Axc 3050 Firmware

    OS
    Phoenixcontact
    all versions

  • Phoenixcontact Fc 350 Pci Eth

    HW
    Phoenixcontact
    all versions

  • Phoenixcontact Fc 350 Pci Eth Firmware

    OS
    Phoenixcontact
    all versions

  • Phoenixcontact Ilc1x0

    HW
    Phoenixcontact
    all versions

  • Phoenixcontact Ilc1x0 Firmware

    OS
    Phoenixcontact
    all versions

  • Phoenixcontact Ilc1x1

    HW
    Phoenixcontact
    all versions

  • Phoenixcontact Ilc1x1 Firmware

    OS
    Phoenixcontact
    all versions

  • Phoenixcontact Ilc 1x1 Gsm\/gprs

    HW
    Phoenixcontact
    all versions

  • Phoenixcontact Ilc 1x1 Gsm\/gprs Firmware

    OS
    Phoenixcontact
    all versions

  • Phoenixcontact Ilc 3xx

    HW
    Phoenixcontact
    all versions

  • Phoenixcontact Ilc 3xx Firmware

    OS
    Phoenixcontact
    all versions

  • Phoenixcontact Pc Worx Rt Basic

    HW
    Phoenixcontact
    all versions

  • Phoenixcontact Pc Worx Rt Basic Firmware

    OS
    Phoenixcontact
    all versions

  • Phoenixcontact Pc Worx Srt

    HW
    Phoenixcontact
    all versions

  • Phoenixcontact Pc Worx Srt Firmware

    OS
    Phoenixcontact
    all versions

  • Phoenixcontact Rfc 430 Eth Ib

    HW
    Phoenixcontact
    all versions

  • Phoenixcontact Rfc 430 Eth Ib Firmware

    OS
    Phoenixcontact
    all versions

  • Phoenixcontact Rfc 450 Eth Ib

    HW
    Phoenixcontact
    all versions

  • Phoenixcontact Rfc 450 Eth Ib Firmware

    OS
    Phoenixcontact
    all versions

  • Phoenixcontact Rfc 460r Pn 3tx

    HW
    Phoenixcontact
    all versions

  • Phoenixcontact Rfc 460r Pn 3tx Firmware

    OS
    Phoenixcontact
    all versions

  • Phoenixcontact Rfc 460r Pn 3tx S

    HW
    Phoenixcontact
    all versions

  • Phoenixcontact Rfc 460r Pn 3tx S Firmware

    OS
    Phoenixcontact
    all versions

  • Phoenixcontact Rfc 470 Pn 3tx

    HW
    Phoenixcontact
    all versions

  • Phoenixcontact Rfc 470 Pn 3tx Firmware

    OS
    Phoenixcontact
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2023-46141CRITICAL9.8PL ✓same product

Phoenix Contact: nieuprawniony zdalny dostęp do urządzeń linii klasycznej

CVE-2019-9201CRITICAL9.8PL ✓same product

Phoenix Contact ILC — brak uwierzytelnienia na porcie 1962 (dostęp zdalny)

CVE-2023-46143HIGH7.5same product

Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT classic line PLCs allows an unauthen...

CVE-2021-33541HIGH7.5same product

Phoenix Contact Classic Line Controllers ILC1x0 and ILC1x1 in all versions/variants are affected by a Denial-o...

CVE-2020-10939HIGH7.8same product

Insecure, default path permissions in PHOENIX CONTACT PC WORX SRT through 1.14 allow for local privilege escal...