Back to Database
Status published
Critical
CVE-2014-9195
Phoenix Contact Software ProConOs and MultiProg Missing Authentication for Critical Function
Vulnerability Description
Phoenix Contact ProConOs and MultiProg do not require authentication, which allows remote attackers to execute arbitrary commands via protocol-compliant traffic.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-9195
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Reid Wightman of Digital Bond
References
More from Phoenix Contact
View All →CVE-2025-41752
Reflected XSS vulnerability in pxc_portSfp.php
High
7.1
CVE-2025-41751
Reflected XSS vulnerability in pxc_portCntr.php
High
7.1
CVE-2025-41750
Reflected XSS vulnerability in pxc_PortCfg.php
High
7.1
CVE-2025-41749
Reflected XSS vulnerability in port_util.php
High
7.1
CVE-2025-41748
Reflected XSS vulnerability in pxc_Dot1xCfg.php
High
7.1
Affected Vendor
Phoenix Contact
View all reports →Affected Software
ProConOs, MultiProg
Vulnerable Versions:
All versions
Timeline
Official Publish:
January 17th, 2015
Last Modified:
September 5th, 2025
Added to House:
July 19th, 2026