ICSA-19-155-02

icsaUScisa_csaf_ot

PHOENIX CONTACT FL NAT SMx

Advisory ansehen veröffentlicht 2019-06-04

Successful exploitation of this vulnerability could allow unauthorized users full access to the device configuration.

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2019-9744UShigh8.8—
An issue was discovered on PHOENIX CONTACT FL NAT SMCS 8TX, FL NAT SMN 8TX, FL NAT SMN 8TX-M, and FL NAT SMN 8TX-M-DMG devices. There is unauthorized access to the WEB-UI by attack…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (4)

  • Mitigationindustrial Ethernet switch FL NAT SMCS 8TX

    Disable the WEB-UI and use configuration access via SNMP instead. Ensure the system password is strong as this is also the SNMP write community.

  • Mitigationindustrial Ethernet switch FL NAT SMN 8TX

    Disable the WEB-UI and use configuration access via SNMP instead. Ensure the system password is strong as this is also the SNMP write community.

  • Mitigationindustrial Ethernet switch FL NAT SMN 8TX-M

    Disable the WEB-UI and use configuration access via SNMP instead. Ensure the system password is strong as this is also the SNMP write community.

  • Mitigationindustrial Ethernet switch FL NAT SMN 8TX-M-DMG

    Disable the WEB-UI and use configuration access via SNMP instead. Ensure the system password is strong as this is also the SNMP write community.

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan