https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T14:58:28.920979+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-08945 bdu:2023-08945 2026-10-02T14:58:28.924945+00:00 bdu:2023-08945 https://cve.radiocsirt.org/vuln/euvd-2026-7505 EUVD-2026-7505 2026-10-02T14:58:28.924980+00:00 EUVD-2026-7505 https://cve.radiocsirt.org/vuln/fkie_cve-2023-5592 fkie_cve-2023-5592 2026-10-02T14:58:28.924994+00:00

Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT MULTIPROG, PHOENIX CONTACT ProConOS eCLR (SDK) allows an unauthenticated remote attacker to download and execute applications without integrity checks on the device which may result in a complete loss of integrity.

 https://cve.radiocsirt.org/vuln/ghsa-f98h-m8p3-7jp3 GHSA-f98h-m8p3-7jp3 2026-10-02T14:58:28.925023+00:00

Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT MULTIPROG, PHOENIX CONTACT ProConOS eCLR (SDK) allows an unauthenticated remote attacker to download and execute applications without integrity checks on the device which may result in a complete loss of integrity.

 https://cve.radiocsirt.org/vuln/gsd-2023-5592 gsd-2023-5592 2026-10-02T14:58:28.925039+00:00 gsd-2023-5592 https://cve.radiocsirt.org/vuln/vde-2023-054 VDE-2023-054 — Phoenix Contact: ProConOS prone to Download of Code Without Integrity Check 2026-10-02T14:58:28.925049+00:00

Increased Security attacks against OT infrastructure and research of Dragos makes it necessary to publish this advisory giving users hints according to basic security measures to support automation systems using existing devices based on ProConOS/ProConOS eCLR.

ProConOS/ProConOS eCLR controller runtime system has been offered as a Software Development Kit (SDK) to automation suppliers that build their own automation devices. ProConOS/ProConOS eCLR is embedded into automation suppliers' hardware, real-time operating systems (RTOS), firmware, and I/O systems. The application (e.g.: logic files, executable logic, configurations) had been designed without integrity and authenticity check which was state of the art when developing the products.

A CRC Check warning the user if the application of the Engineering tool and the PLC differs can be manipulated.

Users need to check with their device vendors if they are affected by this attack vulnerability or if the specific device integration mitigates this attack vector.