ICSA-19-155-02

icsaUScisa_csaf_ot

PHOENIX CONTACT FL NAT SMx

view advisory published 2019-06-04

Successful exploitation of this vulnerability could allow unauthorized users full access to the device configuration.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2019-9744UShigh8.8—
An issue was discovered on PHOENIX CONTACT FL NAT SMCS 8TX, FL NAT SMN 8TX, FL NAT SMN 8TX-M, and FL NAT SMN 8TX-M-DMG devices. There is unauthorized access to the WEB-UI by attack…
02

references

External citations — patches, advisories, analysis.

03

remediations (4)

  • Mitigationindustrial Ethernet switch FL NAT SMCS 8TX

    Disable the WEB-UI and use configuration access via SNMP instead. Ensure the system password is strong as this is also the SNMP write community.

  • Mitigationindustrial Ethernet switch FL NAT SMN 8TX

    Disable the WEB-UI and use configuration access via SNMP instead. Ensure the system password is strong as this is also the SNMP write community.

  • Mitigationindustrial Ethernet switch FL NAT SMN 8TX-M

    Disable the WEB-UI and use configuration access via SNMP instead. Ensure the system password is strong as this is also the SNMP write community.

  • Mitigationindustrial Ethernet switch FL NAT SMN 8TX-M-DMG

    Disable the WEB-UI and use configuration access via SNMP instead. Ensure the system password is strong as this is also the SNMP write community.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan