phoenixcontact Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/phoenixcontact/ Sun, 26 Feb 2023 06:36:37 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png phoenixcontact Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/phoenixcontact/ 32 32 CVE-2020-12517 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-12517/ Sun, 26 Feb 2023 06:36:37 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-12517/ On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an authenticated low privileged user could embed malicious Javascript code to gain admin rights when the admin user visits the vulnerable website (local privilege escalation).

The post CVE-2020-12517 appeared first on CVE Vulnerability.

]]> On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an authenticated low privileged user could embed malicious Javascript code to gain admin rights when the admin user visits the vulnerable website (local privilege escalation).

The post CVE-2020-12517 appeared first on CVE Vulnerability.

]]> CVE-2020-12518 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-12518/ Sun, 26 Feb 2023 06:36:37 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-12518/ On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an attacker can use the knowledge gained by reading the insufficiently protected sensitive information to plan further attacks.

The post CVE-2020-12518 appeared first on CVE Vulnerability.

]]> On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an attacker can use the knowledge gained by reading the insufficiently protected sensitive information to plan further attacks.

The post CVE-2020-12518 appeared first on CVE Vulnerability.

]]> CVE-2020-12519 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-12519/ Sun, 26 Feb 2023 06:36:37 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-12519/ On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an attacker can use this vulnerability i.e. to open a reverse shell with root privileges.

The post CVE-2020-12519 appeared first on CVE Vulnerability.

]]> On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an attacker can use this vulnerability i.e. to open a reverse shell with root privileges.

The post CVE-2020-12519 appeared first on CVE Vulnerability.

]]> CVE-2020-12521 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-12521/ Sun, 26 Feb 2023 06:36:37 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-12521/ On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS a specially crafted LLDP packet may lead to a high system load in the PROFINET stack. An attacker can cause failure of system services or a complete reboot.

The post CVE-2020-12521 appeared first on CVE Vulnerability.

]]> On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS a specially crafted LLDP packet may lead to a high system load in the PROFINET stack. An attacker can cause failure of system services or a complete reboot.

The post CVE-2020-12521 appeared first on CVE Vulnerability.

]]> CVE-2019-9743 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-9743/ Sun, 26 Feb 2023 06:35:04 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-9743/ An issue was discovered on PHOENIX CONTACT RAD-80211-XD and RAD-80211-XD/HP-BUS devices. Command injection can occur in the WebHMI component.

The post CVE-2019-9743 appeared first on CVE Vulnerability.

]]> An issue was discovered on PHOENIX CONTACT RAD-80211-XD and RAD-80211-XD/HP-BUS devices. Command injection can occur in the WebHMI component.

The post CVE-2019-9743 appeared first on CVE Vulnerability.

]]> CVE-2019-9744 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-9744/ Sun, 26 Feb 2023 06:35:04 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-9744/ An issue was discovered on PHOENIX CONTACT FL NAT SMCS 8TX, FL NAT SMN 8TX, FL NAT SMN 8TX-M, and FL NAT SMN 8TX-M-DMG devices. There is unauthorized access to the WEB-UI by attackers arriving from the same source IP address as an authenticated user, because this IP address is used as a session identifier.

The post CVE-2019-9744 appeared first on CVE Vulnerability.

]]> An issue was discovered on PHOENIX CONTACT FL NAT SMCS 8TX, FL NAT SMN 8TX, FL NAT SMN 8TX-M, and FL NAT SMN 8TX-M-DMG devices. There is unauthorized access to the WEB-UI by attackers arriving from the same source IP address as an authenticated user, because this IP address is used as a session identifier.

The post CVE-2019-9744 appeared first on CVE Vulnerability.

]]> CVE-2019-9201 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-9201/ Sun, 26 Feb 2023 06:34:52 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-9201/ Multiple Phoenix Contact devices allow remote attackers to establish TCP sessions to port 1962 and obtain sensitive information or make changes, as demonstrated by using the Create Backup feature to traverse all directories.

The post CVE-2019-9201 appeared first on CVE Vulnerability.

]]> Multiple Phoenix Contact devices allow remote attackers to establish TCP sessions to port 1962 and obtain sensitive information or make changes, as demonstrated by using the Create Backup feature to traverse all directories.

The post CVE-2019-9201 appeared first on CVE Vulnerability.

]]> CVE-2019-18352 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-18352/ Sun, 26 Feb 2023 06:31:44 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-18352/ Improper access control exists on PHOENIX CONTACT FL NAT 2208 devices before V2.90 and FL NAT 2304-2GC-2SFP devices before V2.90 when using MAC-based port security.

The post CVE-2019-18352 appeared first on CVE Vulnerability.

]]> Improper access control exists on PHOENIX CONTACT FL NAT 2208 devices before V2.90 and FL NAT 2304-2GC-2SFP devices before V2.90 when using MAC-based port security.

The post CVE-2019-18352 appeared first on CVE Vulnerability.

]]> CVE-2019-10997 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-10997/ Sun, 26 Feb 2023 06:29:23 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-10997/ An issue was discovered on Phoenix Contact AXC F 2152 (No.2404267) before 2019.0 LTS and AXC F 2152 STARTERKIT (No.1046568) before 2019.0 LTS devices. Protocol Fuzzing on PC WORX Engineer by a man in the middle attacker stops the PLC service. The device must be rebooted, or the PLC service must be restarted manually via […]

The post CVE-2019-10997 appeared first on CVE Vulnerability.

]]> An issue was discovered on Phoenix Contact AXC F 2152 (No.2404267) before 2019.0 LTS and AXC F 2152 STARTERKIT (No.1046568) before 2019.0 LTS devices. Protocol Fuzzing on PC WORX Engineer by a man in the middle attacker stops the PLC service. The device must be rebooted, or the PLC service must be restarted manually via a Linux shell.

The post CVE-2019-10997 appeared first on CVE Vulnerability.

]]> CVE-2019-10998 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-10998/ Sun, 26 Feb 2023 06:29:23 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-10998/ An issue was discovered on Phoenix Contact AXC F 2152 (No.2404267) before 2019.0 LTS and AXC F 2152 STARTERKIT (No.1046568) before 2019.0 LTS devices. Unlimited physical access to the PLC may lead to a manipulation of SD cards data. SD card manipulation may lead to an authentication bypass opportunity.

The post CVE-2019-10998 appeared first on CVE Vulnerability.

]]> An issue was discovered on Phoenix Contact AXC F 2152 (No.2404267) before 2019.0 LTS and AXC F 2152 STARTERKIT (No.1046568) before 2019.0 LTS devices. Unlimited physical access to the PLC may lead to a manipulation of SD cards data. SD card manipulation may lead to an authentication bypass opportunity.

The post CVE-2019-10998 appeared first on CVE Vulnerability.

]]>