CVE-2022-31800

Published: Jun 21, 2022Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: info@cert.vde.com (Secondary)

Description

An unauthenticated, remote attacker could upload malicious logic to devices based on ProConOS/ProConOS eCLR in order to gain full control over the device.

Affected (17)

Products: Phoenixcontact: Axc 1050 Firmware, Axc 1050 Xc Firmware, Axc 3050 Firmware, Fc 350 Pci Eth Firmware, Ilc1x0 Firmware, Ilc1x1 Firmware, Ilc 1x1 Gsm/gprs Firmware, Ilc 3xx Firmware, Pc Worx Rt Basic Firmware, Pc Worx Srt Firmware, Rfc 430 Eth Ib Firmware, Rfc 450 Eth Ib Firmware, Rfc 460r Pn 3tx Firmware, Rfc 460r Pn 3tx S Firmware, Rfc 470 Pn 3tx Firmware, Rfc 470s Pn 3tx Firmware, Rfc 480s Pn 4tx Firmware

17 products

Fc 350 Pci Eth Firmware

Ilc1x0 Firmware

Ilc1x1 Firmware

Ilc 1x1 Gsm/gprs Firmware

Ilc 3xx Firmware

Pc Worx Rt Basic Firmware

Pc Worx Srt Firmware

Rfc 430 Eth Ib Firmware

Rfc 450 Eth Ib Firmware

Rfc 460r Pn 3tx Firmware

Rfc 460r Pn 3tx S Firmware

Rfc 470 Pn 3tx Firmware

Rfc 470s Pn 3tx Firmware

Rfc 480s Pn 4tx Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Axc 1050 Firmware	All versions

Running on/with	Platform Versions
Phoenixcontact Axc 1050	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Axc 1050 Xc Firmware	All versions

Running on/with	Platform Versions
Phoenixcontact Axc 1050 Xc	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Axc 3050 Firmware	All versions

Running on/with	Platform Versions
Phoenixcontact Axc 3050	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fc 350 Pci Eth Firmware	All versions

Running on/with	Platform Versions
Phoenixcontact Fc 350 Pci Eth	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Ilc1x0 Firmware	All versions

Running on/with	Platform Versions
Phoenixcontact Ilc1x0	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Ilc1x1 Firmware	All versions

Running on/with	Platform Versions
Phoenixcontact Ilc1x1	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Ilc 1x1 Gsm/gprs Firmware	All versions

Running on/with	Platform Versions
Phoenixcontact Ilc 1x1 Gsm/gprs	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Ilc 3xx Firmware	All versions

Running on/with	Platform Versions
Phoenixcontact Ilc 3xx	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Pc Worx Rt Basic Firmware	All versions

Running on/with	Platform Versions
Phoenixcontact Pc Worx Rt Basic	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Pc Worx Srt Firmware	All versions

Running on/with	Platform Versions
Phoenixcontact Pc Worx Srt	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Rfc 430 Eth Ib Firmware	All versions

Running on/with	Platform Versions
Phoenixcontact Rfc 430 Eth Ib	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Rfc 450 Eth Ib Firmware	All versions

Running on/with	Platform Versions
Phoenixcontact Rfc 450 Eth Ib	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Rfc 460r Pn 3tx Firmware	All versions

Running on/with	Platform Versions
Phoenixcontact Rfc 460r Pn 3tx	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Rfc 460r Pn 3tx S Firmware	All versions

Running on/with	Platform Versions
Phoenixcontact Rfc 460r Pn 3tx S	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Rfc 470 Pn 3tx Firmware	All versions

Running on/with	Platform Versions
Phoenixcontact Rfc 470 Pn 3tx	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Rfc 470s Pn 3tx Firmware	All versions

Running on/with	Platform Versions
Phoenixcontact Rfc 470s Pn 3tx	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Rfc 480s Pn 4tx Firmware	All versions

Running on/with	Platform Versions
Phoenixcontact Rfc 480s Pn 4tx	All versions

Related CWEs

CWE-345

Insufficient Verification of Data Authenticity

The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.

References (2)

https://cert.vde.com/en/advisories/VDE-2022-025/

Source: info@cert.vde.com

ExploitThird Party Advisory

https://cert.vde.com/en/advisories/VDE-2022-025/

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.