CVE:CVE-2022-31800
CNNVD:CNNVD-202206-2084
Phoenix Contact ProConOS/ProConOS eCLR是德国Phoenix Contact公司的一系列嵌入式自动化设备。
Phoenix Contact 多款产品存在数据伪造问题漏洞，未经身份验证的远程攻击者可以将恶意逻辑上传到基于 ProConOS/ProConOS eCLR 的设备，以获得对设备的完全控制权。
solution:Upgrade phoenixcontact axc_1050_firmware to a higher version than *; Upgrade phoenixcontact axc_1050_xc_firmware to a higher version than *; Upgrade phoenixcontact axc_3050_firmware to a higher version than *; Upgrade phoenixcontact fc_350_pci_eth_firmware to a higher version than *; Upgrade phoenixcontact ilc1x0_firmware to a higher version than *; Upgrade phoenixcontact ilc1x1_firmware to a higher version than *; Upgrade phoenixcontact ilc_1x1_gsm/gprs_firmware to a higher version than *; Upgrade phoenixcontact ilc_3xx_firmware to a higher version than *; Upgrade phoenixcontact pc_worx_rt_basic_firmware to a higher version than *; Upgrade phoenixcontact pc_worx_srt_firmware to a higher version than *; Upgrade phoenixcontact rfc_430_eth-ib_firmware to a higher version than *; Upgrade phoenixcontact rfc_450_eth-ib_firmware to a higher version than *; Upgrade phoenixcontact rfc_460r_pn_3tx_firmware to a higher version than *; Upgrade phoenixcontact rfc_460r_pn_3tx-s_firmware to a higher version than *; Upgrade phoenixcontact rfc_470_pn_3tx_firmware to a higher version than *; Upgrade phoenixcontact rfc_470s_pn_3tx_firmware to a higher version than *; Upgrade phoenixcontact rfc_480s_pn_4tx_firmware to a higher version than *