PT-2022-3054

Name of the Vulnerable Software and Affected Versions ProConOS/ProConOS eCLR affected versions not specified Description The issue is related to insufficient authentication of data in the ProConOS/ProConOS eCLR operating system, which can be exploited by an unauthenticated, remote attacker to...

CVE-2022-31801: Insufficient Verification of Data Authenticity

An unauthenticated, remote attacker could upload malicious logic to the devices based on ProConOS/ProConOS eCLR in order to gain full control over the device...

CVE-2022-31800: Insufficient Verification of Data Authenticity

An unauthenticated, remote attacker could upload malicious logic to devices based on ProConOS/ProConOS eCLR in order to gain full control over the device...

PT-2022-3055

Name of the Vulnerable Software and Affected Versions ProConOS/ProConOS eCLR versions affected versions not specified AXC 1050 AXC 1050 XC AXC 3050 FC 350 PCI ETH ILC1x0 ILC1x1 ILC 1x1 GSM/GPRS ILC 3xx PC WORX RT BASIC PC WORX SRT RFC 430 ETH-IB RFC 450 ETH-IB RFC 460R PN 3TX RFC 460R PN 3TX-S RF...

Phoenix Contact ProConOS and MULTIPROG

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Phoenix Contact Equipment: ProConOS/ProConOS eCLR and MULTIPROG Vulnerability: Insufficient Verification of Data Authenticity CISA is aware of a public report, known as “OT:ICEFALL” that details...