CVE-2023-5592

EPSS 0.14%
Published 14.12.2023 14:15:45
Last modified 21.11.2024 08:42:05
Source info@cert.vde.com
Teams watchlist Login
Open Login

Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT MULTIPROG, PHOENIX CONTACT ProConOS eCLR (SDK) allows an unauthenticated remote attacker to download and execute applications without integrity checks on the device which may result in a complete loss of integrity.

Affected products Warnungen 0 Metrics 2 CWE 1 References 4

Data is provided by the National Vulnerability Database (NVD)

Phoenixcontact ≫ Multiprog

Phoenixcontact ≫ Proconos Eclr

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.14%	0.357

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
info@cert.vde.com	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-494 Download of Code Without Integrity Check

The product downloads source code or an executable from a remote location and executes the code without sufficiently verifying the origin and integrity of the code.

https://cert.vde.com/en/advisories/VDE-2023-054/

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2023-5592

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-5592

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-5592

EUVD