CVE-2022-31800
Summary
| CVE | CVE-2022-31800 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2022-06-21 08:15:00 UTC |
| Updated | 2022-06-28 17:04:00 UTC |
| Description | An unauthenticated, remote attacker could upload malicious logic to devices based on ProConOS/ProConOS eCLR in order to gain full control over the device. |
Risk And Classification
Problem Types: CWE-345
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Phoenixcontact | Axc 1050 | - | All | All | All |
| Operating System | Phoenixcontact | Axc 1050 Firmware | All | All | All | All |
| Hardware | Phoenixcontact | Axc 1050 Xc | - | All | All | All |
| Operating System | Phoenixcontact | Axc 1050 Xc Firmware | All | All | All | All |
| Hardware | Phoenixcontact | Axc 3050 | - | All | All | All |
| Operating System | Phoenixcontact | Axc 3050 Firmware | All | All | All | All |
| Hardware | Phoenixcontact | Fc 350 Pci Eth | - | All | All | All |
| Operating System | Phoenixcontact | Fc 350 Pci Eth Firmware | All | All | All | All |
| Hardware | Phoenixcontact | Ilc1x0 | - | All | All | All |
| Operating System | Phoenixcontact | Ilc1x0 Firmware | All | All | All | All |
| Hardware | Phoenixcontact | Ilc1x1 | - | All | All | All |
| Operating System | Phoenixcontact | Ilc1x1 Firmware | All | All | All | All |
| Hardware | Phoenixcontact | Ilc 1x1 Gsm/gprs | - | All | All | All |
| Operating System | Phoenixcontact | Ilc 1x1 Gsm/gprs Firmware | All | All | All | All |
| Hardware | Phoenixcontact | Ilc 3xx | - | All | All | All |
| Operating System | Phoenixcontact | Ilc 3xx Firmware | All | All | All | All |
| Hardware | Phoenixcontact | Pc Worx Rt Basic | - | All | All | All |
| Operating System | Phoenixcontact | Pc Worx Rt Basic Firmware | All | All | All | All |
| Hardware | Phoenixcontact | Pc Worx Srt | - | All | All | All |
| Operating System | Phoenixcontact | Pc Worx Srt Firmware | All | All | All | All |
| Hardware | Phoenixcontact | Rfc 430 Eth-ib | - | All | All | All |
| Operating System | Phoenixcontact | Rfc 430 Eth-ib Firmware | All | All | All | All |
| Hardware | Phoenixcontact | Rfc 450 Eth-ib | - | All | All | All |
| Operating System | Phoenixcontact | Rfc 450 Eth-ib Firmware | All | All | All | All |
| Hardware | Phoenixcontact | Rfc 460r Pn 3tx | - | All | All | All |
| Hardware | Phoenixcontact | Rfc 460r Pn 3tx-s | - | All | All | All |
| Operating System | Phoenixcontact | Rfc 460r Pn 3tx-s Firmware | All | All | All | All |
| Operating System | Phoenixcontact | Rfc 460r Pn 3tx Firmware | All | All | All | All |
| Hardware | Phoenixcontact | Rfc 470s Pn 3tx | - | All | All | All |
| Operating System | Phoenixcontact | Rfc 470s Pn 3tx Firmware | All | All | All | All |
| Hardware | Phoenixcontact | Rfc 470 Pn 3tx | - | All | All | All |
| Operating System | Phoenixcontact | Rfc 470 Pn 3tx Firmware | All | All | All | All |
| Hardware | Phoenixcontact | Rfc 480s Pn 4tx | - | All | All | All |
| Operating System | Phoenixcontact | Rfc 480s Pn 4tx Firmware | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| VDE-2022-025 | CERT@VDE | CONFIRM | cert.vde.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
Vendor Comments And Credit
Discovery Credit
LEGACY: This vulnerability was reported by Forescout.
Legacy QID Mappings
- 590969 Phoenix Contact Classic Line Controllers Vulnerability (ICSA-22-172-03)