CVE-2022-31801: critical vulnerability in PHOENIX CONTACT ProConOS
Insufficient Verification of Data Vulnerability in ProConOS/ProConOS eCLR SDK and MULTIPROG Engineering tool
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
An attacker can remotely upload harmful code to devices running ProConOS without needing a password, taking complete control of the device. This is critical because these devices often control important industrial systems.
The vulnerability allows unauthenticated remote code upload to ProConOS/eCLR-based devices due to insufficient data verification (CWE-345). An attacker can exploit this over the network to execute arbitrary logic and achieve full device compromise without prior authentication or authorization.
In the same product, most dangerous first.