CVE-2022-31800

high-risk
Published 2022-06-21

An unauthenticated, remote attacker could upload malicious logic to devices based on ProConOS/ProConOS eCLR in order to gain full control over the device.

Do I need to act?

~
1.6% chance of exploitation in next 30 days
EPSS score — moderate exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
9
CVSS 9.8/10 Critical
NETWORK / LOW complexity

Affected Products (17)

Axc 1050 Firmware
Axc 1050 Xc Firmware
Axc 3050 Firmware
Fc 350 Pci Eth Firmware
Ilc1X0 Firmware
Ilc1X1 Firmware
Ilc 1X1 Gsm\/Gprs Firmware
Ilc 3Xx Firmware
Pc Worx Rt Basic Firmware
Pc Worx Srt Firmware
Rfc 430 Eth-Ib Firmware
Rfc 450 Eth-Ib Firmware
Rfc 460R Pn 3Tx Firmware
Rfc 460R Pn 3Tx-S Firmware
Rfc 470 Pn 3Tx Firmware
Rfc 470S Pn 3Tx Firmware
Rfc 480S Pn 4Tx Firmware

Affected Vendors

Phoenixcontact

References (2)

Exploit https://cert.vde.com/en/advisories/VDE-2022-025/
Exploit https://cert.vde.com/en/advisories/VDE-2022-025/
55
/ 100
high-risk
Severity 32/34 · Critical
Exploitability 4/34 · Minimal
Exposure 19/34 · Moderate