CVE-2023-5592: Phoenix Contact: ProConOs prone to Download of Code Without Integrity Check

Published Dec 14, 2023

Updated

Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT MULTIPROG, PHOENIX CONTACT ProConOS eCLR (SDK) allows an unauthenticated remote attacker to download and execute applications without integrity checks on the device which may result in a complete loss of integrity.

Affected Software

2 affected components

Phoenixcontact Multiprog

Phoenixcontact Proconos Eclr

Event History

Dec 14, 2023

CVE Published

via MITRE·02:04 PM

Data Sourced

via MITRE·02:04 PM

DescriptionSeverityWeakness

May 24, 57290

Event

via FIRST·01:24 AM

Frequently Asked Questions

What is the severity of CVE-2023-5592?

CVE-2023-5592 is rated critical due to its potential to allow remote code execution without integrity checks.

How do I fix CVE-2023-5592?

To fix CVE-2023-5592, update PHOENIX CONTACT MULTIPROG and ProConOS eCLR to the latest versions where the vulnerability is patched.

Who is affected by CVE-2023-5592?

CVE-2023-5592 affects users of PHOENIX CONTACT MULTIPROG and ProConOS eCLR applications.

What are the consequences of CVE-2023-5592?

If exploited, CVE-2023-5592 may lead to unauthorized application execution and a complete loss of control over the device.

Is CVE-2023-5592 being actively exploited?

While no specific exploitation reports are available, the nature of CVE-2023-5592's vulnerability suggests a high risk of exploitation.