VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 17, 2015· Updated Jun 17, 2026

CVE-2014-9195

CVE-2014-9195

Description

Phoenix Contact ProConOs and MultiProg do not require authentication, which allows remote attackers to execute arbitrary commands via protocol-compliant traffic.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

11
  • Phoenixcontact/ProConOscpe-rescue2 versions
    All versions+ 1 more
    • (no CPE)range: All versions
    • (no CPE)
  • Phoenixcontact Software/Multiprog3 versions
    cpe:2.3:a:phoenixcontact-software:multiprog:5.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:phoenixcontact-software:multiprog:5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:phoenixcontact-software:multiprog:5.0:*:*:*:express:*:*:*
    • cpe:2.3:a:phoenixcontact-software:multiprog:5.0:*:*:*:pro\+:*:*:*
  • Phoenixcontact Software/Proconos Eclr4 versions
    cpe:2.3:o:phoenixcontact-software:proconos_eclr:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:phoenixcontact-software:proconos_eclr:*:*:*:*:*:*:*:*
    • cpe:2.3:o:phoenixcontact-software:proconos_eclr:*:*:*:*:single_chip:*:*:*
    • cpe:2.3:o:phoenixcontact-software:proconos_eclr:*:*:*:*:softplc:*:*:*
    • cpe:2.3:o:phoenixcontact-software:proconos_eclr:*:*:*:*:visual_studio:*:*:*
  • Phoenixcontact/MultiProgcpe-rescue2 versions
    All versions+ 1 more
    • (no CPE)range: All versions
    • (no CPE)

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.