Phoenix Contact Software ProConOs and MultiProg Missing Authentication for Critical Function

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Sep 5, 2025 · CVE.org

   Updated

   Phoenix Contact ProConOs and MultiProg do not require authentication, which allows remote attackers to execute arbitrary commands via protocol-compliant traffic.

2. Oct 6, 2026 · CISA Cybersecurity Advisories

   Detected

   View CSAF Summary Hitachi Energy is publishing this cybersecurity advisory in response to the security findings reported by Dragos affecting end-of-life RTU500 CMU firmware version 9.x. The reported findings are associated with legacy RTU500 firmware versions that were developed according to the cybersecurity requirements, threat landscape, and industry practices that existed at the time of their

Affected

• vendor Phoenix Contact MultiProgversion unspecified
• vendor Phoenix Contact ProConOsversion unspecified

Sources

• CISA Cybersecurity AdvisoriesGovernment advisoryCVE-2014-9195

  View CSAF Summary Hitachi Energy is publishing this cybersecurity advisory in response to the security findings reported by Dragos affecting end-of-life RTU500 CMU firmware version 9.x. The reported findings are associated with legacy RTU500 firmware versions that were developed

  cisa.gov
• CISA ICS AdvisoriesGovernment advisoryCVE-2014-9195

  View CSAF Summary Hitachi Energy is publishing this cybersecurity advisory in response to the security findings reported by Dragos affecting end-of-life RTU500 CMU firmware version 9.x. The reported findings are associated with legacy RTU500 firmware versions that were developed

  cisa.gov
• CVE.orgVulnerability recordCVE-2014-9195

  Phoenix Contact ProConOs and MultiProg do not require authentication, which allows remote attackers to execute arbitrary commands via protocol-compliant traffic.

  cve.org

References

• Reference · cisa.gov
• 37066 · exploit-db.com