CVE Feed

    Dashboard / CVE / CVE-2022-31800

    CVE-2022-31800

    An unauthenticated, remote attacker could upload malicious logic to devices based on ProConOS/ProConOS eCLR in order to gain full control over the device.

    Published:Jun 21, 2022
    Last Modified:Jun 2, 2026
    EPS:Jun 21, 2022
    EPSS Score:0.01572
    CVSS Score:9.8

    Affected Products

    Vendor
    Phoenixcontact
    Product
    Axc 1050
    Vendor
    Phoenixcontact
    Product
    Axc 1050 Firmware
    Vendor
    Phoenixcontact
    Product
    Axc 1050 Xc
    Vendor
    Phoenixcontact
    Product
    Axc 1050 Xc Firmware
    Vendor
    Phoenixcontact
    Product
    Axc 3050
    Vendor
    Phoenixcontact
    Product
    Axc 3050 Firmware
    Vendor
    Phoenixcontact
    Product
    Fc 350 Pci Eth
    Vendor
    Phoenixcontact
    Product
    Fc 350 Pci Eth Firmware
    Vendor
    Phoenixcontact
    Product
    Ilc1x0
    Vendor
    Phoenixcontact
    Product
    Ilc1x0 Firmware
    Vendor
    Phoenixcontact
    Product
    Ilc1x1
    Vendor
    Phoenixcontact
    Product
    Ilc1x1 Firmware
    Vendor
    Phoenixcontact
    Product
    Ilc 1x1 Gsm\/gprs
    Vendor
    Phoenixcontact
    Product
    Ilc 1x1 Gsm\/gprs Firmware
    Vendor
    Phoenixcontact
    Product
    Ilc 3xx
    Vendor
    Phoenixcontact
    Product
    Ilc 3xx Firmware
    Vendor
    Phoenixcontact
    Product
    Pc Worx Rt Basic
    Vendor
    Phoenixcontact
    Product
    Pc Worx Rt Basic Firmware
    Vendor
    Phoenixcontact
    Product
    Pc Worx Srt
    Vendor
    Phoenixcontact
    Product
    Pc Worx Srt Firmware
    Vendor
    Phoenixcontact
    Product
    Rfc 430 Eth-ib
    Vendor
    Phoenixcontact
    Product
    Rfc 430 Eth-ib Firmware
    Vendor
    Phoenixcontact
    Product
    Rfc 450 Eth-ib
    Vendor
    Phoenixcontact
    Product
    Rfc 450 Eth-ib Firmware
    Vendor
    Phoenixcontact
    Product
    Rfc 460r Pn 3tx
    Vendor
    Phoenixcontact
    Product
    Rfc 460r Pn 3tx-s
    Vendor
    Phoenixcontact
    Product
    Rfc 460r Pn 3tx-s Firmware
    Vendor
    Phoenixcontact
    Product
    Rfc 460r Pn 3tx Firmware
    Vendor
    Phoenixcontact
    Product
    Rfc 470 Pn 3tx
    Vendor
    Phoenixcontact
    Product
    Rfc 470 Pn 3tx Firmware
    Vendor
    Phoenixcontact
    Product
    Rfc 470s Pn 3tx
    Vendor
    Phoenixcontact
    Product
    Rfc 470s Pn 3tx Firmware
    Vendor
    Phoenixcontact
    Product
    Rfc 480s Pn 4tx
    Vendor
    Phoenixcontact
    Product
    Rfc 480s Pn 4tx Firmware

    Exploits

    https://cert.vde.com/en/advisories/VDE-2022-025/https://cert.vde.com/en/advisories/VDE-2022-025/

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High