CVE-2014-9195 Phoenix Contact Software ProConOs and MultiProg Missing Authentication for Critical Function

Phoenix Contact ProConOs and MultiProg do not require authentication, which allows remote attackers to execute arbitrary commands via protocol-compliant traffic...

CVE-2014-9195

CVE-2014-9195 targets Phoenix Contact ProConOs and MultiProg, where missing authentication allows remote attackers to execute commands via protocol traffic. Connected materials confirm: (1) affected products: ProConOs and MultiProg; (2) vulnerability type: missing authentication for critical func...

Phoenix Contact ProConOs and MultiProg Authentication Bypass Vulnerability

Phoenix Contact ProConOs and MultiProg are applications that run process control and manage IEC 61131 logic. The protocol used by Phoenix Contact ProConOs and MultiProg fails to have a proper authentication mechanism, allowing an attacker to exploit the vulnerability to inject commands into the...