phoenixcontact-software records
2 published records for vendor phoenixcontact-software.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 1 · 50%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-306 Missing Authentication for Critical Function1
- CWE-345 Insufficient Verification of Data Authenticity1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
2 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
54Plan | CVE-2014-9195Weaponized | Phoenix Contact Software ProConOs and MultiProg Missing Authentication for Critical Functionphoenixcontact-software · multiprog · CWE-306 | High7.5 | — | 81.3% | Jan 16, 2015 |
39Monitor | CVE-2022-31801No exploit | Insufficient Verification of Data Vulnerability in ProConOS/ProConOS eCLR SDK and MULTIPROG Engineering toolphoenixcontact · multiprog · CWE-345 | Critical9.8 | — | 1.1% | Jun 21, 2022 |
- CVE-2014-919554Plan
Phoenix Contact Software ProConOs and MultiProg Missing Authentication for Critical Function
HighCVSS 7.5WeaponizedEPSS 81%phoenixcontact-software · multiprogJan 16, 2015
- CVE-2022-3180139Monitor
Insufficient Verification of Data Vulnerability in ProConOS/ProConOS eCLR SDK and MULTIPROG Engineering tool
CriticalCVSS 9.8No exploitEPSS 1%phoenixcontact · multiprogJun 21, 2022