What’s Vulnerable › Vulnerabilities

CVE-2022-31801: Insufficient Verification of Data Vulnerability in ProConOS/ProConOS eCLR SDK and MULTIPROG Engineering tool

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-06-21 · updated 2026-06-17
• Weakness: CWE-345

Description

An unauthenticated, remote attacker could upload malicious logic to the devices based on ProConOS/ProConOS eCLR in order to gain full control over the device.

Affected products

• PHOENIX CONTACT MULTIPROG: all versions
• PHOENIX CONTACT ProConOS: all versions
• Phoenixcontact-Software Proconos Eclr: all versions

References

• https://cert.vde.com/en/advisories/VDE-2022-026/
• https://cert.vde.com/en/advisories/VDE-2022-026/

Get alerted when CVE-2022-31801 or the next vulnerability affects your stack