← Back to home
ICSA-15-013-03  ·  Published 2025-06-06  ·  View on CISA ICS-CERT ↗

Phoenix Contact Software ProConOs and MultiProg Authentication Vulnerability

CVSS 10.0 CRITICAL

CVEs (1)

Remediations

  • Phoenix Contact Software designed the applications and protocols without authentication mechanisms. It is the understanding of Phoenix Contact Software that vendors using the application software and its protocol would incorporate its own authentication mechanism in its final product. Phoenix Contact Software is considering adding authentication software into future versions of its application software and its protocol.

Affected Vendors

Phoenix Contact Software

Affected Products (2)

Phoenix Contact Software · ProConOs vers:all/*
Phoenix Contact Software · MultiProg vers:all/*

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more