CVE-2023-5592

EPSS 0.14%
Veröffentlicht 14.12.2023 14:15:45
Zuletzt bearbeitet 21.11.2024 08:42:05
Quelle info@cert.vde.com
Teams Watchlist Login
Unerledigt Login

Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT MULTIPROG, PHOENIX CONTACT ProConOS eCLR (SDK) allows an unauthenticated remote attacker to download and execute applications without integrity checks on the device which may result in a complete loss of integrity.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Phoenixcontact ≫ Multiprog

Phoenixcontact ≫ Proconos Eclr

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.14%	0.357

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
info@cert.vde.com	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-494 Download of Code Without Integrity Check

The product downloads source code or an executable from a remote location and executes the code without sufficiently verifying the origin and integrity of the code.

https://cert.vde.com/en/advisories/VDE-2023-054/

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2023-5592

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-5592

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-5592

EUVD