Lucene search

[email protected]CVE-2019-9201

HistoryJun 21, 2022 - 12:00 a.m.

CVE-2019-9201

2022-06-2100:00:00

CWE-306

[email protected]

web.nvd.nist.gov

phoenix contact

tcp sessions

port 1962

sensitive information

remote attackers

9 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:P/I:P/A:C

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.2 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.9%

JSON

Multiple Phoenix Contact devices allow remote attackers to establish TCP sessions to port 1962 and obtain sensitive information or make changes, as demonstrated by using the Create Backup feature to traverse all directories.

Affected configurations

NVD

Node

phoenixcontactilc_131_eth_firmwareMatch-

AND

phoenixcontactilc_131_ethMatch-

Node

phoenixcontactilc_131_eth\/xc_firmwareMatch-

AND

phoenixcontactilc_131_eth\/xcMatch-

Node

phoenixcontactilc_151_eth_firmwareMatch-

AND

phoenixcontactilc_151_ethMatch-

Node

phoenixcontactilc_151_eth\/xc_firmwareMatch-

AND

phoenixcontactilc_151_eth\/xcMatch-

Node

phoenixcontactilc_171_eth_2tx_firmwareMatch-

AND

phoenixcontactilc_171_eth_2txMatch-

Node

phoenixcontactilc_191_eth_2tx_firmwareMatch-

AND

phoenixcontactilc_191_eth_2txMatch-

Node

phoenixcontactilc_191_me\/an_firmwareMatch-

AND

phoenixcontactilc_191_me\/anMatch-

Node

phoenixcontactaxc_1050_firmwareMatch-

AND

phoenixcontactaxc_1050Match-

CPENameOperatorVersion
phoenixcontact:ilc_131_eth_firmwarephoenixcontact ilc 131 eth firmwareeq-

CPE	Name	Operator	Version
phoenixcontact:ilc_131_eth_firmware	phoenixcontact ilc 131 eth firmware	eq	-

References

cert.vde.com/en/advisories/VDE-2019-015/

medium.com/%40SergiuSechel/misconfiguration-in-ilc-gsm-gprs-devices-leaves-over-1-200-ics-devices-vulnerable-to-attacks-over-82c2d4a91561

Social References

9 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:P/I:P/A:C

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.2 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.9%

JSON

Related for CVE-2019-9201

prion1 ics1 cvelist1 nvd1 nessus1