PT-2023-7874 · Phoenix Contact · Phoenix Contact Multiprog+1
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:C/A:N |
Name of the Vulnerable Software and Affected Versions
PHOENIX CONTACT MULTIPROG, PHOENIX CONTACT ProConOS eCLR (SDK) (affected versions not specified)
Description
The issue is related to the download of code without integrity checks, allowing an unauthenticated remote attacker to download and execute applications on the device, potentially resulting in a complete loss of integrity.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Phoenix Contact Multiprog
Phoenix Contact Proconos Eclr