Remote Command Execution Vulnerability in Phoenix Contact ProConOs and MultiProg
CVE-2014-9195

Currently unrated

Key Information:

Vendor: Phoenix Contact
Status: Proconos; Multiprog
Vendor: CVE Published:; 17 January 2015

🔔 Create Phoenix Contact Vulnerability Alert

Badges

👾 Exploit Exists🟡 Public PoC🟣 EPSS 82%

What is CVE-2014-9195?

A vulnerability exists in Phoenix Contact's ProConOs and MultiProg that allows remote attackers to execute arbitrary commands. The lack of authentication in these products means that any attacker can send specially crafted protocol-compliant traffic to exploit this flaw, potentially leading to unauthorized access and control over the affected systems. This issue emphasizes the importance of implementing robust authentication measures in critical system components.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

MultiProg All versions

ProConOs All versions

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2014-9195 - Proof of Concept