What is the CVSS score of CVE-2022-31800?

CVE-2022-31800 has a CVSS 3.1 base score of 9.8 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 1.5%.

Is there a public PoC exploit available for CVE-2022-31800?

Yes, a public proof-of-concept exploit is available for CVE-2022-31800. Prioritise patching immediately. EPSS: 1.5%.

Axc 1050 Firmware CVE-2022-31800

CRITICAL

Insufficient Verification of Data Authenticity (CWE-345)

2022-06-21 info@cert.vde.com

Information Disclosure Axc 1050 Firmware Axc 1050 Xc Firmware Axc 3050 Firmware Fc 350 Pci Eth Firmware Ilc1X0 Firmware Ilc1X1 Firmware Ilc 1X1 Gsm Gprs Firmware Ilc 3Xx Firmware Pc Worx Rt Basic Firmware Pc Worx Srt Firmware Rfc 430 Eth Ib Firmware Rfc 450 Eth Ib Firmware Rfc 460R Pn 3Tx Firmware Rfc 460R Pn 3Tx S Firmware Rfc 470 Pn 3Tx Firmware Rfc 470S Pn 3Tx Firmware Rfc 480S Pn 4Tx Firmware

9.8

CVSS 3.1 · Vendor: cert

Severity by source

Vendor (cert) PRIMARY

9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from Vendor (cert) · only source for this CVE.

CVSS VectorVendor: cert

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

CVE Published

Jun 21, 2022 - 08:15 cve.org

CRITICAL 9.8

DescriptionCVE.org

An unauthenticated, remote attacker could upload malicious logic to devices based on ProConOS/ProConOS eCLR in order to gain full control over the device.

AnalysisAI

An unauthenticated, remote attacker could upload malicious logic to devices based on ProConOS/ProConOS eCLR in order to gain full control over the device. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-345. An unauthenticated, remote attacker could upload malicious logic to devices based on ProConOS/ProConOS eCLR in order to gain full control over the device. Affected products include: Phoenixcontact Axc 1050 Firmware, Phoenixcontact Axc 1050 Xc Firmware, Phoenixcontact Axc 3050 Firmware, Phoenixcontact Fc 350 Pci Eth Firmware, Phoenixcontact Ilc1X0 Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.