CVE-2023-5592 — HIGH (7.5) — White Hats Nepal

Vulnerability Description

Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT MULTIPROG, PHOENIX CONTACT ProConOS eCLR (SDK) allows an unauthenticated remote attacker to download and execute applications without integrity checks on the device which may result in a complete loss of integrity.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

HIGH

Availability

NONE

Affected Products

Vendor	Product	Versions
Phoenixcontact	Multiprog	All versions
Phoenixcontact	Proconos Eclr	All versions

Related Weaknesses (CWE)

CWE-494

References

https://cert.vde.com/en/advisories/VDE-2023-054/Third Party Advisory
https://cert.vde.com/en/advisories/VDE-2023-054/Third Party Advisory

FAQ

What is CVE-2023-5592?

CVE-2023-5592 is a vulnerability with a CVSS score of 7.5 (HIGH). Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT MULTIPROG, PHOENIX CONTACT ProConOS eCLR (SDK) allows an unauthenticated remote attacker to download and execute applications ...

How severe is CVE-2023-5592?

CVE-2023-5592 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-5592?

Check the references section above for vendor advisories and patch information. Affected products include: Phoenixcontact Multiprog, Phoenixcontact Proconos Eclr.