CVE-2023-5592

7.5 highEPSS 0.3%

High (7.5) in phoenixcontact. EPSS 0.3% chance of exploitation in the next 30 days.

Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT MULTIPROG, PHOENIX CONTACT ProConOS eCLR (SDK) allows an unauthenticated remote attacker to download and execute applications without integrity checks on the device which may result in a complete loss of integrity.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 26% of CVEs (scores of 2026-10-31)
CWE: CWE-494
Published: 2023-12-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

phoenixcontact:multiprog
phoenixcontact:proconos_eclr

References

https://cert.vde.com/en/advisories/VDE-2023-054/
https://cert.vde.com/en/advisories/VDE-2023-054/

Check your stack JSON