CVE-2022-31800: Insufficient Verification of Data Vulnerability in PHOENIX CONTACT classic line industrial controllers
Published Jun 21, 2022
·Updated
An unauthenticated, remote attacker could upload malicious logic to devices based on ProConOS/ProConOS eCLR in order to gain full control over the device.
Affected Software
34 affected components
Phoenixcontact Axc 1050 Firmware
Phoenixcontact Axc 1050
Phoenixcontact Axc 1050 Xc Firmware
Phoenixcontact Axc 1050 Xc
Phoenixcontact Axc 3050 Firmware
Phoenixcontact Axc 3050
Phoenixcontact Fc 350 Pci Eth Firmware
Phoenixcontact Fc 350 Pci Eth
Phoenixcontact Ilc1x0 Firmware
Phoenixcontact Ilc1x0
Phoenixcontact Ilc1x1 Firmware
Phoenixcontact Ilc1x1
Phoenixcontact Ilc 1x1 Gsm\/gprs Firmware
Phoenixcontact Ilc 1x1 Gsm\/gprs
Phoenixcontact Ilc 3xx Firmware
Phoenixcontact Ilc 3xx
Phoenixcontact Pc Worx Rt Basic Firmware
Phoenixcontact Pc Worx Rt Basic
Phoenixcontact Pc Worx Srt Firmware
Phoenixcontact Pc Worx Srt
Phoenixcontact Rfc 430 Eth-ib Firmware
Phoenixcontact Rfc 430 Eth-ib
Phoenixcontact Rfc 450 Eth-ib Firmware
Phoenixcontact Rfc 450 Eth-ib
Phoenixcontact Rfc 460r Pn 3tx Firmware
Phoenixcontact Rfc 460r Pn 3tx
Phoenixcontact Rfc 460r Pn 3tx-s Firmware
Phoenixcontact Rfc 460r Pn 3tx-s
Phoenixcontact Rfc 470 Pn 3tx Firmware
Phoenixcontact Rfc 470 Pn 3tx
Phoenixcontact Rfc 470s Pn 3tx Firmware
Phoenixcontact Rfc 470s Pn 3tx
Phoenixcontact Rfc 480s Pn 4tx Firmware
Phoenixcontact Rfc 480s Pn 4tx
Event History
Jun 21, 2022
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
DescriptionSeverityWeakness
Sep 8, 58389
Event
02:23 AM
Frequently Asked Questions
1
What is CVE-2022-31800?
CVE-2022-31800 is a vulnerability that allows an unauthenticated remote attacker to upload malicious logic to devices based on ProConOS/ProConOS eCLR in order to gain full control over the device.
2
What is the severity of CVE-2022-31800?
CVE-2022-31800 has a severity rating of 9.8, which is categorized as critical.
3
How does CVE-2022-31800 affect Phoenixcontact Axc 1050 Firmware?
Phoenixcontact Axc 1050 Firmware is affected by CVE-2022-31800.
4
Is Phoenixcontact Axc 1050 Xc affected by CVE-2022-31800?
No, Phoenixcontact Axc 1050 Xc is not affected by CVE-2022-31800.
5
How can I fix CVE-2022-31800?
There is currently no fix available for CVE-2022-31800. It is recommended to follow the guidance provided by the vendor or security experts.