NetSight
critical9.8

CVE-2022-31800

An unauthenticated, remote attacker could upload malicious logic to devices based on ProConOS/ProConOS eCLR in order to gain full control over the device.

Impact

An unauthenticated, remote attacker could upload malicious logic to devices based on ProConOS/ProConOS eCLR in order to gain full control over the device.

Affected products

VendorProductAffected versions
PhoenixcontactAxc 1050 Firmware
All versions
PhoenixcontactAxc 1050 Xc Firmware
All versions
PhoenixcontactAxc 3050 Firmware
All versions
PhoenixcontactFc 350 Pci Eth Firmware
All versions
PhoenixcontactIlc1x0 Firmware
All versions
PhoenixcontactIlc1x1 Firmware
All versions
PhoenixcontactIlc 1x1 Gsm\/Gprs Firmware
All versions
PhoenixcontactIlc 3xx Firmware
All versions
PhoenixcontactPc Worx Rt Basic Firmware
All versions
PhoenixcontactPc Worx Srt Firmware
All versions
PhoenixcontactRfc 430 Eth-Ib Firmware
All versions
PhoenixcontactRfc 450 Eth-Ib Firmware
All versions

Weakness classification

References