Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT MULTIPROG, PHOENIX CONTACT ProConOS eCLR (SDK) allows an unauthenticated remote attacker to download and execute applications without integrity checks on the device which may result in a complete loss of integrity.
References
| Link | Resource |
|---|---|
| https://cert.vde.com/en/advisories/VDE-2023-054/ | Third Party Advisory |
Configurations
History
21 Dec 2023, 17:16
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Phoenixcontact multiprog
Phoenixcontact proconos Eclr Phoenixcontact |
|
| CPE | cpe:2.3:a:phoenixcontact:multiprog:*:*:*:*:*:*:*:* cpe:2.3:a:phoenixcontact:proconos_eclr:*:*:*:*:*:*:*:* |
|
| References | () https://cert.vde.com/en/advisories/VDE-2023-054/ - Third Party Advisory |
14 Dec 2023, 14:49
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-12-14 14:15
Updated : 2024-02-28 20:54
NVD link : CVE-2023-5592
Mitre link : CVE-2023-5592
CVE.ORG link : CVE-2023-5592
JSON object : View
Products Affected
phoenixcontact
- proconos_eclr
- multiprog
CWE
CWE-494
Download of Code Without Integrity Check