{"id":"CVE-2022-31800","aliases":["EUVD-2022-53189","GHSA-m7x4-j34m-52hc"],"status":"published","title":"Insufficient Verification of Data Vulnerability in PHOENIX CONTACT classic line industrial controllers","description":"An unauthenticated, remote attacker could upload malicious logic to devices based on ProConOS/ProConOS eCLR in order to gain full control over the device.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.01596,"percentile":0.75943,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-345"],"published":"2022-06-21T08:00:19Z","modified":"2026-06-17T04:46:19Z","products":[{"vendor":"phoenix contact","product":"axc 1050"},{"vendor":"phoenix contact","product":"axc 1050 xc"},{"vendor":"phoenix contact","product":"axc 3050"},{"vendor":"phoenix contact","product":"fc 350 pci eth"},{"vendor":"phoenix contact","product":"ilc 1x0"},{"vendor":"phoenix contact","product":"ilc 1x1"},{"vendor":"phoenix contact","product":"ilc 1x1 gsm/gprs"},{"vendor":"phoenix contact","product":"ilc 3xx"},{"vendor":"phoenix contact","product":"pc worx rt basic"},{"vendor":"phoenix contact","product":"pc worx srt"},{"vendor":"phoenix contact","product":"rfc 430 eth-ib"},{"vendor":"phoenix contact","product":"rfc 450 eth-ib"},{"vendor":"phoenix contact","product":"rfc 460r pn 3tx"},{"vendor":"phoenix contact","product":"rfc 460r pn 3tx-s"},{"vendor":"phoenix contact","product":"rfc 470 pn 3tx"},{"vendor":"phoenix contact","product":"rfc 470s pn 3tx"},{"vendor":"phoenix contact","product":"rfc 480s pn 4tx"},{"vendor":"phoenixcontact","product":"axc_1050_firmware"},{"vendor":"phoenixcontact","product":"axc_1050_xc_firmware"},{"vendor":"phoenixcontact","product":"axc_3050_firmware"},{"vendor":"phoenixcontact","product":"fc_350_pci_eth_firmware"},{"vendor":"phoenixcontact","product":"ilc1x0_firmware"},{"vendor":"phoenixcontact","product":"ilc1x1_firmware"},{"vendor":"phoenixcontact","product":"ilc_1x1_gsm\\/gprs_firmware"},{"vendor":"phoenixcontact","product":"ilc_3xx_firmware"},{"vendor":"phoenixcontact","product":"pc_worx_rt_basic_firmware"},{"vendor":"phoenixcontact","product":"pc_worx_srt_firmware"},{"vendor":"phoenixcontact","product":"rfc_430_eth-ib_firmware"},{"vendor":"phoenixcontact","product":"rfc_450_eth-ib_firmware"},{"vendor":"phoenixcontact","product":"rfc_460r_pn_3tx-s_firmware"},{"vendor":"phoenixcontact","product":"rfc_460r_pn_3tx_firmware"},{"vendor":"phoenixcontact","product":"rfc_470_pn_3tx_firmware"},{"vendor":"phoenixcontact","product":"rfc_470s_pn_3tx_firmware"},{"vendor":"phoenixcontact","product":"rfc_480s_pn_4tx_firmware"}],"references":[{"url":"https://cert.vde.com/en/advisories/VDE-2022-025/","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-31800"},{"url":"https://github.com/advisories/GHSA-m7x4-j34m-52hc"}],"sources":{"cve":[{"id":"CVE-2022-31800","title":"Insufficient Verification of Data Vulnerability in PHOENIX CONTACT classic line industrial controllers","description":"An unauthenticated, remote attacker could upload malicious logic to devices based on ProConOS/ProConOS eCLR in order to gain full control over the device.","status":"published","published":"2022-06-21T08:00:19.264Z","modified":"2026-06-02T20:15:56.406Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-345"],"updated_at":"2026-11-02T14:34:35.615708Z"}],"euvd":[{"id":"EUVD-2022-53189","description":"An unauthenticated, remote attacker could upload malicious logic to devices based on ProConOS/ProConOS eCLR in order to gain full control over the device.","status":"published","published":"2022-06-21T08:00:19Z","modified":"2026-06-02T20:15:56Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T18:20:55.231104Z"}],"ghsa":[{"id":"GHSA-m7x4-j34m-52hc","title":"An unauthenticated, remote attacker could upload malicious logic to devices based on ProConOS...","description":"An unauthenticated, remote attacker could upload malicious logic to devices based on ProConOS/ProConOS eCLR in order to gain full control over the device.","status":"published","published":"2022-06-22T00:01:01Z","modified":"2023-01-27T05:05:04Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-345"],"updated_at":"2026-11-02T14:42:37.253278Z"}],"nvd":[{"id":"CVE-2022-31800","description":"An unauthenticated, remote attacker could upload malicious logic to devices based on ProConOS/ProConOS eCLR in order to gain full control over the device.","status":"published","published":"2022-06-21T08:15:07.51Z","modified":"2026-06-17T04:46:19.843Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-345"],"updated_at":"2026-11-02T14:07:22.613788Z"}]}}