ICSA-22-172-04

icsaUScisa_csaf_ot

Phoenix Contact ProConOS and MULTIPROG

view advisory published 2022-06-21

Successful exploitation of this vulnerability could allow an attacker to upload arbitrary malicious code after gaining access to the communication to products utilizing ProConOS/ProConOS eCLR or MULTIPROG.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2022-31801UShigh10.0OT elevated—
An unauthenticated, remote attacker could upload malicious logic to the devices based on ProConOS/ProConOS eCLR in order to gain full control over the device.
02

references

External citations — patches, advisories, analysis.

03

remediations (3)

  • MitigationMULTIPROG

    Do not send project data as a file via email or other transfer mechanisms without additional integrity and authenticity checks. Save project data in protected environments only.

  • MitigationProConOS

    Do not send project data as a file via email or other transfer mechanisms without additional integrity and authenticity checks. Save project data in protected environments only.

  • MitigationProConOS eCLR

    Do not send project data as a file via email or other transfer mechanisms without additional integrity and authenticity checks. Save project data in protected environments only.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan