Phoenix Contact ProConOS prone to Incorrect Permission Assignment for Critical Resource

CVE-2023-0757

What is CVE-2023-0757?

The vulnerability affects PHOENIX CONTACT MULTIPROG and ProConOS eCLR SDK, allowing an unauthenticated remote attacker to exploit incorrect permission assignments. This flaw enables the attacker to upload arbitrary malicious code, potentially leading to full access over the affected device, which poses serious security concerns for users relying on these applications.

References