CVE-2023-5592

Published: Dec 14, 2023Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Exploitability: 3.9 / Impact: 3.6

Source: info@cert.vde.com (Secondary)

Description

Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT MULTIPROG, PHOENIX CONTACT ProConOS eCLR (SDK) allows an unauthenticated remote attacker to download and execute applications without integrity checks on the device which may result in a complete loss of integrity.

Affected (2)

Products: Phoenixcontact: Multiprog, Proconos Eclr

2 products

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Phoenixcontact Multiprog	All versions

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Phoenixcontact Proconos Eclr	All versions

Related CWEs

Download of Code Without Integrity Check

The product downloads source code or an executable from a remote location and executes the code without sufficiently verifying the origin and integrity of the code.

References (2)

https://cert.vde.com/en/advisories/VDE-2023-054/

Source: info@cert.vde.com

Third Party Advisory

https://cert.vde.com/en/advisories/VDE-2023-054/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.