Phoenixcontact Multiprog — known CVE vulnerabilities

Every CVE whose affected-product data names Phoenixcontact Multiprog, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2022-31801 — CVSS 9.8 (critical): An unauthenticated, remote attacker could upload malicious logic to the devices based on ProConOS/ProConOS eCLR in order to gain full…
• CVE-2023-0757 — CVSS 9.8 (critical): Incorrect Permission Assignment for Critical Resource vulnerability in PHOENIX CONTACT MULTIPROG, PHOENIX CONTACT ProConOS eCLR (SDK)…
• CVE-2023-5592 — CVSS 7.5 (high): Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT MULTIPROG, PHOENIX CONTACT ProConOS eCLR (SDK) allows an…