PT-2022-3054 · Proconos · Proconos

Published 2022-06-21 · Updated 2022-06-28 · CVE-2022-31801

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ProConOS/ProConOS eCLR (affected versions not specified)

Description The issue is related to insufficient authentication of data in the ProConOS/ProConOS eCLR operating system, which can be exploited by an unauthenticated, remote attacker to upload malicious logic and gain full control over the device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insufficient Verification of Data Authenticity

Weakness Enumeration

CWE-345

Related Identifiers

BDU:2022-03723

CVE-2022-31801

Affected Products

Proconos

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2022-31801 · Security Note
• https://bdu.fstec.ru/vul/2022-03723 · Security Note
• https://cert.vde.com/en/advisories/VDE-2022-026 · Note
• https://t.me/cibsecurity/44858 · Telegram Post