2 lines
2.3 KiB
JSON
2 lines
2.3 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"MULTIPROG","vendor":"PHOENIX CONTACT","versions":[{"status":"affected","version":"all"}]},{"defaultStatus":"unaffected","product":"ProConOS eCLR (SDK)","vendor":"PHOENIX CONTACT","versions":[{"status":"affected","version":"all"}]}],"source":"info@cert.vde.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:phoenixcontact:multiprog:*:*:*:*:*:*:*:*","matchCriteriaId":"42452860-CB53-479D-ADE1-E8166EC834C4","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:phoenixcontact:proconos_eclr:*:*:*:*:*:*:*:*","matchCriteriaId":"B9A422FD-2C4C-4B77-B619-6747474A3FA7","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Incorrect Permission Assignment for Critical Resource vulnerability in PHOENIX CONTACT MULTIPROG, PHOENIX CONTACT ProConOS eCLR (SDK) allows an unauthenticated remote attacker to upload arbitrary malicious code and gain full access on the affected device."},{"lang":"es","value":"Asignación de permisos incorrecta para una vulnerabilidad de recursos críticos en PHOENIX CONTACT MULTIPROG, PHOENIX CONTACT ProConOS eCLR (SDK) permite a un atacante remoto no autenticado cargar código malicioso arbitrario y obtener acceso completo al dispositivo afectado."}],"id":"CVE-2023-0757","lastModified":"2026-06-17T05:26:14.547","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.9,"source":"info@cert.vde.com","type":"Secondary"}]},"published":"2023-12-14T14:15:42.083","references":[{"source":"info@cert.vde.com","tags":["Third Party Advisory"],"url":"https://cert.vde.com/en/advisories/VDE-2023-051/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://cert.vde.com/en/advisories/VDE-2023-051/"}],"sourceIdentifier":"info@cert.vde.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-732"}],"source":"info@cert.vde.com","type":"Secondary"}]}
|