CVE-2019-9201

· CRITICALModified

← All CVEs

CVSS v3.1

9.8

EPSS

3.10%

Published

Feb 26, 2019

Modified

Nov 21, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple Phoenix Contact devices allow remote attackers to establish TCP sessions to port 1962 and obtain sensitive information or make changes, as demonstrated by using the Create Backup feature to traverse all directories.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-306

Affected Products (16)

phoenixcontact · ilc_131_eth_firmwarevulnerable

phoenixcontact · ilc_131_eth

phoenixcontact · ilc_131_eth\/xc_firmwarevulnerable

phoenixcontact · ilc_131_eth\/xc

phoenixcontact · ilc_151_eth_firmwarevulnerable

phoenixcontact · ilc_151_eth

phoenixcontact · ilc_151_eth\/xc_firmwarevulnerable

phoenixcontact · ilc_151_eth\/xc

phoenixcontact · ilc_171_eth_2tx_firmwarevulnerable

phoenixcontact · ilc_171_eth_2tx

phoenixcontact · ilc_191_eth_2tx_firmwarevulnerable

phoenixcontact · ilc_191_eth_2tx

phoenixcontact · ilc_191_me\/an_firmwarevulnerable

phoenixcontact · ilc_191_me\/an

phoenixcontact · axc_1050_firmwarevulnerable

phoenixcontact · axc_1050

References (4)

https://cert.vde.com/en/advisories/VDE-2019-015/

Third Party Advisory

https://medium.com/%40SergiuSechel/misconfiguration-in-ilc-gsm-gprs-devices-leaves-over-1-200-ics-devices-vulnerable-to-attacks-over-82c2d4a91561

Exploit

https://cert.vde.com/en/advisories/VDE-2019-015/

Third Party Advisory

https://medium.com/%40SergiuSechel/misconfiguration-in-ilc-gsm-gprs-devices-leaves-over-1-200-ics-devices-vulnerable-to-attacks-over-82c2d4a91561

Exploit

KEV Catalog EPSS Scores Vendors All CVEs