CVE-2022-31800

No vendor fix yet; a mitigation is available.

• Mitigationphoenix_contact_psirt

  Phoenix Contact classic line controllers are designed and developed for the use in closed industrial networks. The controller doesn't feature logic integrity and authenticity checks by design. Phoenix Contact therefore strongly recommends using the devices exclusively in closed networks and protected by a suitable firewall. Customers using Phoenix Contact classic line controllers are recommended to operate the devices in closed networks or protected with a suitable firewall as intended. Generic information and recommendations for security measures to protect network-capable devices can be found in the application note.

• MitigationAXC 1050cisa_csaf_ot

  Connections between the engineering tools and the controller must always be in a locally protected environment or protected by VPN for remote access.

• MitigationAXC 1050 XCcisa_csaf_ot

  Connections between the engineering tools and the controller must always be in a locally protected environment or protected by VPN for remote access.

• MitigationAXC 3050cisa_csaf_ot

  Connections between the engineering tools and the controller must always be in a locally protected environment or protected by VPN for remote access.

• MitigationFC 350 PCI ETHcisa_csaf_ot

  Connections between the engineering tools and the controller must always be in a locally protected environment or protected by VPN for remote access.

• MitigationILC 1x0cisa_csaf_ot

  Connections between the engineering tools and the controller must always be in a locally protected environment or protected by VPN for remote access.

• MitigationILC 1x1cisa_csaf_ot

  Connections between the engineering tools and the controller must always be in a locally protected environment or protected by VPN for remote access.

• MitigationILC 1x1 GSM/GPRScisa_csaf_ot

  Connections between the engineering tools and the controller must always be in a locally protected environment or protected by VPN for remote access.

• MitigationILC 3xxcisa_csaf_ot

  Connections between the engineering tools and the controller must always be in a locally protected environment or protected by VPN for remote access.

• MitigationPC WORX RT BASICcisa_csaf_ot

  Connections between the engineering tools and the controller must always be in a locally protected environment or protected by VPN for remote access.

• MitigationPC WORX SRTcisa_csaf_ot

  Connections between the engineering tools and the controller must always be in a locally protected environment or protected by VPN for remote access.

• MitigationRFC 430 ETH-IBcisa_csaf_ot

  Connections between the engineering tools and the controller must always be in a locally protected environment or protected by VPN for remote access.

• MitigationRFC 450 ETH-IBcisa_csaf_ot

  Connections between the engineering tools and the controller must always be in a locally protected environment or protected by VPN for remote access.

• MitigationRFC 460R PN 3TXcisa_csaf_ot

  Connections between the engineering tools and the controller must always be in a locally protected environment or protected by VPN for remote access.

• MitigationRFC 460R PN 3TX-Scisa_csaf_ot

  Connections between the engineering tools and the controller must always be in a locally protected environment or protected by VPN for remote access.

• MitigationRFC 470 PN 3TXcisa_csaf_ot

  Connections between the engineering tools and the controller must always be in a locally protected environment or protected by VPN for remote access.

• MitigationRFC 470S PN 3TXcisa_csaf_ot

  Connections between the engineering tools and the controller must always be in a locally protected environment or protected by VPN for remote access.

• MitigationRFC 480S PN 4TXcisa_csaf_ot

  Connections between the engineering tools and the controller must always be in a locally protected environment or protected by VPN for remote access.