CVE-2019-9201

highPriorität · verfolgen · 40OT-Risiko · erhöhtEPSS 0.031 · 88. PerzentilDEEURUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

3.10% (88th) EPSS

CVSS 9 · high

Is it mine?

70 products

Prüfe deine Angriffsfläche

Who says so?

5 sources

cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · bewertet 2026-10-27

Multiple Phoenix Contact devices allow remote attackers to establish TCP sessions to port 1962 and obtain sensitive information or make changes, as demonstrated by using the Create Backup feature to traverse all directories.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

BehobenAXC 1050cisa_csaf_ot
RFC 480S PN 4TX: Article number 2404577, firmware 6.10
BehobenAXC 1050XCcisa_csaf_ot
RFC 480S PN 4TX: Article number 2404577, firmware 6.10
BehobenAXC 3050cisa_csaf_ot
RFC 480S PN 4TX: Article number 2404577, firmware 6.10
BehobenFC 350 PCI ETHcisa_csaf_ot
RFC 480S PN 4TX: Article number 2404577, firmware 6.10
BehobenILC 1x0cisa_csaf_ot
RFC 480S PN 4TX: Article number 2404577, firmware 6.10
BehobenILC 1x1cisa_csaf_ot
RFC 480S PN 4TX: Article number 2404577, firmware 6.10
BehobenILC 3xxcisa_csaf_ot
RFC 480S PN 4TX: Article number 2404577, firmware 6.10
BehobenPC WORX RT BASICcisa_csaf_ot
RFC 480S PN 4TX: Article number 2404577, firmware 6.10
BehobenPC WORX SRTcisa_csaf_ot
RFC 480S PN 4TX: Article number 2404577, firmware 6.10
BehobenRFC 430 ETHcisa_csaf_ot
RFC 480S PN 4TX: Article number 2404577, firmware 6.10
BehobenRFC 450 ETHcisa_csaf_ot
RFC 480S PN 4TX: Article number 2404577, firmware 6.10
BehobenRFC 460Rcisa_csaf_ot
RFC 480S PN 4TX: Article number 2404577, firmware 6.10
BehobenRFC 470Scisa_csaf_ot
RFC 480S PN 4TX: Article number 2404577, firmware 6.10
BehobenRFC 480Scisa_csaf_ot
RFC 480S PN 4TX: Article number 2404577, firmware 6.10
Mitigationphoenix_contact_psirt
Customers using Phoenix Contact classic line controllers are recommended to operate the devices in closed networks or protected with a suitable firewall as intended. For detailed information on our recommendations for measures to protect network-capable devices, please refer to our application note external link for classic line controllers. If the use of an affected controller in protected zones is not suitable OT communication protocols should be disabled. Either by using the CPU services via console or Web-based Management according to the controller type. Information's for which controllers and from which firmware version communication protocols can be disabled are described in our application note for classic line controllers or the manual to the respective controller which is available for download at the Phoenix Contact website. Controller supporting CPU services or WBM for disabling communication protocols: | Article | Article Number | Minimum firmware version | |----------------------|----------------|----------------------------------| | ILC 1x0 | All variants | not possible | | ILC 1x1 | All variants | >= FW 4.42 | | ILC 1x1 GSM/GPRS | 2700977 | >= FW 4.42 | | ILC 3xx | All variants | FW 3.98 | | AXC 1050 | 2700988 | >= FW 3.01, FW 5.00 (WBM) | | AXC 1050 XC | 2701295 | >= FW 3.01, FW 5.00 (WBM) | | AXC 3050 | 2700989 | >= FW 5.60, FW 6.30 (WBM) | | RFC 480S PN 4TX | 2404577 | FW 6.10 | | RFC 470 PN 3TX | 2916600 | >= FW 4.20 | | RFC 470S PN 3TX | 2916794 | >= FW 4.20 | | RFC 460R PN 3TX | 2700784 | >= FW 5.00 | | RFC 460R PN 3TX-S | 1096407 | FW 5.30 | | RFC 430 ETH-IB | 2730190 | not possible | | RFC 450 ETH-IB | 2730200 | not possible | | PC WORX SRT | 2701680 | not possible | | PC WORX RT BASIC | 2700291 | not possible | | FC 350 PCI ETH | 2730844 | not possible |
MitigationAXC 1050cisa_csaf_ot
AXC 1050: Article number 2700988, firmware 3.01, 5.00 (WBM)
MitigationAXC 1050XCcisa_csaf_ot
AXC 1050: Article number 2700988, firmware 3.01, 5.00 (WBM)
MitigationAXC 3050cisa_csaf_ot
AXC 1050: Article number 2700988, firmware 3.01, 5.00 (WBM)
MitigationFC 350 PCI ETHcisa_csaf_ot
AXC 1050: Article number 2700988, firmware 3.01, 5.00 (WBM)
MitigationILC 1x0cisa_csaf_ot
AXC 1050: Article number 2700988, firmware 3.01, 5.00 (WBM)
MitigationILC 1x1cisa_csaf_ot
AXC 1050: Article number 2700988, firmware 3.01, 5.00 (WBM)
MitigationILC 3xxcisa_csaf_ot
AXC 1050: Article number 2700988, firmware 3.01, 5.00 (WBM)
MitigationPC WORX RT BASICcisa_csaf_ot
AXC 1050: Article number 2700988, firmware 3.01, 5.00 (WBM)
MitigationPC WORX SRTcisa_csaf_ot
AXC 1050: Article number 2700988, firmware 3.01, 5.00 (WBM)
MitigationRFC 430 ETHcisa_csaf_ot
AXC 1050: Article number 2700988, firmware 3.01, 5.00 (WBM)
MitigationRFC 450 ETHcisa_csaf_ot
AXC 1050: Article number 2700988, firmware 3.01, 5.00 (WBM)
MitigationRFC 460Rcisa_csaf_ot
AXC 1050: Article number 2700988, firmware 3.01, 5.00 (WBM)
MitigationRFC 470Scisa_csaf_ot
AXC 1050: Article number 2700988, firmware 3.01, 5.00 (WBM)
MitigationRFC 480Scisa_csaf_ot
AXC 1050: Article number 2700988, firmware 3.01, 5.00 (WBM)

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

9.8

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · high–critical · 9–9.8

v2.09highAV:N/AC:L/Au:N/C:P/I:P/A:Cprimary · NVD / NIST USAusnutzbarkeit 10 · Auswirkung 8.5

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 5.9

v3.09.8criticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · CISA US

v3.19.8criticalAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · ENISA EU

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · cve@mitre.org USAusnutzbarkeit 3.9 · Auswirkung 5.9

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · Phoenix Contact PSIRT DE

v3.19criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Exploitation: poc · Automatable: yes · Technical Impact: totalcoordinatorcisa_ssvcUS

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-306USprimärCWE-287USCWE-306USCWE-306US

betroffene Produkte (70)

Betroffene Produkte und Versionsbereiche.

AXC 1050: Article number 2700988alle Versionencisa_csaf_otUS
AXC 1050XC: Article number 2701295alle Versionencisa_csaf_otUS
AXC 3050: Article number 2700989alle Versionencisa_csaf_otUS
FC 350 PCI ETH: Article number 2730844alle Versionencisa_csaf_otUS
ILC 1x0: All variantsalle Versionencisa_csaf_otUS
ILC 1x1: All variantsalle Versionencisa_csaf_otUS
ILC 3xx: All variantsalle Versionencisa_csaf_otUS
PC WORX RT BASIC: Article number 2700291alle Versionencisa_csaf_otUS
PC WORX SRT: Article number 2701680alle Versionencisa_csaf_otUS
RFC 430 ETH: Article number 2730190alle Versionencisa_csaf_otUS
RFC 450 ETH: Article number 2730200alle Versionencisa_csaf_otUS
RFC 460R: Article number 2700784alle Versionencisa_csaf_otUS
RFC 470S: Article number 2916794alle Versionencisa_csaf_otUS
RFC 480S: Article number 2404577alle Versionencisa_csaf_otUS
PHOENIX CONTACT AXC 1050alle Versionencisa_csaf_otUS
PHOENIX CONTACT AXC 3050alle Versionencisa_csaf_otUS
PHOENIX CONTACT FC 350 PCI ETHalle Versionencisa_csaf_otUS
PHOENIX CONTACT ILC 1x0alle Versionencisa_csaf_otUS
PHOENIX CONTACT ILC 1x1alle Versionencisa_csaf_otUS
PHOENIX CONTACT ILC 3xxalle Versionencisa_csaf_otUS

20 von 70 angezeigt

Advisories (2)

Hersteller- und Ökosystem-Meldungen dazu.

VDE-2019-015PHOENIX CONTACT: Security Advisory for multiple Industrial Controllers2019-08-07csaf · phoenix_contact_psirtDE
Phoenix Contact Classic Line industrial controllers (ILC1x0 and ILC1x1 product families as well as the AXIOLINE controllers AXC1050 and AXC3050) are developed and designed for the use in closed industrial networks. The communication protocols used for device management and configuration do not feature authentication measures. Update A, 2022-06-21 This updated version contains additional affected products.In addition, a new application note for classic line controllers had been published to make it easier for our customers to find out the actions how to disable the unauthorized communication ports instead of checking out each controller's manual.
ICSA-22-172-05Phoenix Contact Classic Line Industrial Controllers2022-06-21icsa · cisa_csaf_otUS
Successful exploitation of this vulnerability could allow an unauthorized attacker to change configurations, manipulate services, or cause a denial-of-service condition.

auch bekannt als (5)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu cisa_csaf_ot phoenix_contact_psirt NVD CVE.org MITRE

veröffentlicht 2019-02-26geändert 2026-06-17

verwandt (4,469)

Verwandte Einträge.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2026-67277US	high8.2OT kritisch	1.56% (75th)	KEV	2026-09-05
RouterOS accepts a "related" btest connection before the corresponding primary session has completed authentication. An unauthenticated client can use this state to start an IPv4 U…
CVE-2026-81578US	critical9.8OT kritisch	83.7% (100th)	KEV	2026-08-28
An improper access control vulnerability exists in the web management interface of PaperCut MF and PaperCut NG. Under specific conditions, unauthenticated remote requests targeting…
CVE-2026-72529US	—OT kritisch	1.46% (74th)	KEV	2026-08-19
A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could execute an ar…
CVE-2026-56164US	critical9.8OT kritisch	1.01% (63rd)	KEV	2026-07-14
Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-59822US	high8.2OT kritisch	0.84% (58th)	KEV	2026-07-08
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.84.0, LiteLLM's MCP Streamable HTTP endpoint allowed an unauthenticated attacker to…

+4464 weitere

Referenzen (9)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan