1752 matches found
Default credentials
Webvisit in Phoenix Contact ILC PLCs offers a password macro to protect HMI pages on the PLC against casual or coincidental opening of HMI pages by the user. The password macro can be configured in a way that the password is stored and transferred in clear text...
CVE-2016-8371
CVE-2016-8371 affects Phoenix Contact ILC PLCs where the web server can be reached without authentication even when an authentication mechanism is enabled. The issue is described across multiple sources as an improper authentication vulnerability that could allow unauthorized access to the PLC’s ...
CVE-2016-8371
The web server in Phoenix Contact ILC PLCs can be accessed without authenticating even if the authentication mechanism is enabled...
CVE-2016-8380
CVE-2016-8380 affects Phoenix Contact ILC PLCs. The web server exposes read and write access to PLC variables without authentication, constituting an improper authentication vulnerability. The impact is unauthorized access to PLC data and potential manipulation of tag values, as corroborated by m...
CVE-2016-8380
The web server in Phoenix Contact ILC PLCs allows access to read and write PLC variables without authentication...
CVE-2016-8366
Webvisit in Phoenix Contact ILC PLCs offers a password macro to protect HMI pages on the PLC against casual or coincidental opening of HMI pages by the user. The password macro can be configured in a way that the password is stored and transferred in clear text...
CVE-2016-8366
CVE-2016-8366 affects Phoenix Contact ILC PLCs with WebVisit. The vulnerability arises from a password macro where credentials can be stored and transferred in clear text, enabling potential exposure of user passwords via the HMI protection mechanism. Connected documents confirm the issue is tied...
PT-2018-11: Buffer Overflow in PHOENIX CONTACT FL SWITCH
The specialists of the Positive Research center have detected a Buffer Overflow vulnerability in PHOENIX CONTACT FL SWITCH. Buffer overflows in Phoenix Contact managed FL SWITCH allow attackers to cause a denial of service, execute arbitrary code, or disable Web and Telnet services. How to fix...
PT-2018-14: Buffer Overflow in PHOENIX CONTACT FL SWITCH
The specialists of the Positive Research center have detected a Buffer Overflow vulnerability in PHOENIX CONTACT FL SWITCH. A buffer overflow vulnerability in Phoenix Contact managed FL SWITCH due to improper handling of very large cookies allows attackers to obtain unauthorized access to the...
PT-2018-13: Command Injection in PHOENIX CONTACT FL SWITCH
The specialists of the Positive Research center have detected a Command Injection vulnerability in PHOENIX CONTACT FL SWITCH. Vulnerability in Phoenix Contact managed FL SWITCH allows attackers to inject and execute arbitrary OS commands. How to fix Update firmware to the latest version Advisory...
PT-2018-12: Information Disclosure in PHOENIX CONTACT FL SWITCH
The specialists of the Positive Research center have detected an Information Disclosure vulnerability in PHOENIX CONTACT FL SWITCH. Vulnerability in Phoenix Contact managed FL SWITCH allows unauthenticated attackers to read the configuration file. How to fix Update firmware to the latest version...
phoenix.enquira.com XSS vulnerability
Open Bug Bounty ID: OBB-561285 Description| Value ---|--- Affected Website:| phoenix.enquira.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
The vulnerability of Phoenix Contact FL SWITCH router microprogramming software, related to deficiencies in authentication procedures, allows a intruder to access diagnostic information.
The vulnerability of Phoenix Contact FL SWITCH router microprogramming software is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to remotely access diagnostic information by using the device’s monitoring mode...
PHOENIX CONTACT mGuard Unauthorized Modification Vulnerability
Phoenix Contact mGuard is a security device from Phoenix Contact that protects systems from unauthorized access and installation. An unauthorized modification vulnerability exists in the PHOENIX CONTACT mGuard. The mGuard device relies on an internal verification of the integrity of the update...
Input validation
An Improper Validation of Integrity Check Value issue was discovered in PHOENIX CONTACT mGuard firmware versions 7.2 to 8.6.0. mGuard devices rely on internal checksums for verification of the internal integrity of the update packages. Verification may not always be performed correctly, allowing ...
CVE-2018-5441
An Improper Validation of Integrity Check Value issue was discovered in PHOENIX CONTACT mGuard firmware versions 7.2 to 8.6.0. mGuard devices rely on internal checksums for verification of the internal integrity of the update packages. Verification may not always be performed correctly, allowing ...
CVE-2018-5441
An Improper Validation of Integrity Check Value issue was discovered in PHOENIX CONTACT mGuard firmware versions 7.2 to 8.6.0. mGuard devices rely on internal checksums for verification of the internal integrity of the update packages. Verification may not always be performed correctly, allowing ...
CVE-2018-5441
The CVE-2018-5441 issue affects PHOENIX CONTACT mGuard devices running firmware 7.2–8.6.0. Root cause: improper validation of the internal integrity check value during verification of update packages, enabling modification of firmware updates. Impact: attacker could modify firmware packages, with...
PHOENIX CONTACT mGuard
CVSS v3 7.8 ATTENTION: Low skill level to exploit. Vendor: PHOENIX CONTACT Equipment: mGuard Vulnerability: Improper Validation of Integrity Check Value AFFECTED PRODUCTS The following versions of mGuard, a network device, are affected: mGuard firmware versions 7.2 to 8.6.0 IMPACT Successful...
