CVE-2023-5592CWE-494

Phoenix Contact: ProConOs prone to Download of Code Without Integrity Check

High · published December 14, 2023

CVSS v3.1
7.5
EPSS
0%
Percentile
25.1
In the wild
Unconfirmed
What it is

Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT MULTIPROG, PHOENIX CONTACT ProConOS eCLR (SDK) allows an unauthenticated remote attacker to download and execute applications without integrity checks on the device which may result in a complete loss of integrity.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00332 · 25.1th percentile
Weakness
CWE-494 · Download of Code Without Integrity Check
Published
2023-12-14T14:04Z
EPSS history
Timeline
  • 14 DEC 14:04Z
    Phoenix Contact: ProConOs prone to Download of Code Without Integrity Check
    cvelistv5