CVE-2023-0757: Phoenixcontact Multiprog

Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days.

Incorrect Permission Assignment for Critical Resource vulnerability in PHOENIX CONTACT MULTIPROG, PHOENIX CONTACT ProConOS eCLR (SDK) allows an unauthenticated remote attacker to upload arbitrary malicious code and gain full access on the affected device.

Affected products

• Phoenixcontact Multiprog: any version
• Phoenixcontact Proconos Eclr: any version

Published 2023-12-14. Last modified 2026-06-17.