CVE-2020-9435

mediumPriorität · verfolgen · 30OT-Risiko · erhöhtEPSS 0.012 · 67. PerzentilDEEUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

1.16% (67th) EPSS

CVSS 5 · medium

Is it mine?

23 products

Prüfe deine Angriffsfläche

Who says so?

4 sources

cnnvd · enisa_euvd · nvd · phoenix_contact_psirt

EPSS · bewertet 2026-10-27

PHOENIX CONTACT TC ROUTER 3002T-4G through 2.05.3, TC ROUTER 2002T-3G through 2.05.3, TC ROUTER 3002T-4G VZW through 2.05.3, TC ROUTER 3002T-4G ATT through 2.05.3, TC CLOUD CLIENT 1002-4G through 2.03.17, and TC CLOUD CLIENT 1002-TXTX through 1.03.17 devices contain a hardcoded certificate (and key) that is used by default for web-based services on the device. Impersonation, man-in-the-middle, or passive decryption attacks are possible if the generic certificate is not replaced by a device-specific certificate during installation.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Noch kein Hersteller-Fix; eine Mitigation ist verfügbar.

Mitigationphoenix_contact_psirt
The pre-installed generic X.509 certificate should be renewed or replaced by an individual certificate during initial configuration. For details on replacing this certificate please refer to the user manual on page 51 et seq. Press 'renew' to create a new self-signed device certificate or upload a user specific certificate with the upload dialog. To avoid the manual generation of an individual certificate, the devices will be shipped with individual certificates starting with a future release.

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

7.5

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 5–7.5

v2.05mediumAV:N/AC:L/Au:N/C:P/I:N/A:Nprimary · NVD / NIST USAusnutzbarkeit 10 · Auswirkung 2.9

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 3.6

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nsecondary · Phoenix Contact PSIRT DE

v3.16.9mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:Usecondary · CVSS-BT (t0sche)

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-798USprimärCWE-798US

betroffene Produkte (23)

Betroffene Produkte und Versionsbereiche.

n/a n/a≤ n/aenisa_euvdEU
phoenixcontact tc cloud client 1002-4g firmware≤ 2.03.17nvdUScpe:2.3:o:phoenixcontact:tc_cloud_client_1002-4g_firmware:*:*:*:*:*:*:*:*
phoenixcontact tc cloud client 1002-txtx firmware≤ 1.03.17nvdUScpe:2.3:o:phoenixcontact:tc_cloud_client_1002-txtx_firmware:*:*:*:*:*:*:*:*
phoenixcontact tc router 2002t-3g firmware≤ 2.05.3nvdUScpe:2.3:o:phoenixcontact:tc_router_2002t-3g_firmware:*:*:*:*:*:*:*:*
phoenixcontact tc router 3002t-4g att firmware≤ 2.05.3nvdUScpe:2.3:o:phoenixcontact:tc_router_3002t-4g_att_firmware:*:*:*:*:*:*:*:*
phoenixcontact tc router 3002t-4g firmware≤ 2.05.3nvdUScpe:2.3:o:phoenixcontact:tc_router_3002t-4g_firmware:*:*:*:*:*:*:*:*
phoenixcontact tc router 3002t-4g vzw firmware≤ 2.05.3nvdUScpe:2.3:o:phoenixcontact:tc_router_3002t-4g_vzw_firmware:*:*:*:*:*:*:*:*
Firmware 1.03.18 installed on TC CLOUD CLIENT 1002-TXTXalle Versionenfixedphoenix_contact_psirtDE
Firmware 2.03.18 installed on TC CLOUD CLIENT 1002-4Galle Versionenfixedphoenix_contact_psirtDE
Firmware 2.03.18 installed on TC CLOUD CLIENT 1002-4G ATTalle Versionenfixedphoenix_contact_psirtDE
Firmware 2.03.18 installed on TC CLOUD CLIENT 1002-4G VZWalle Versionenfixedphoenix_contact_psirtDE
Firmware 2.05.4 installed on TC ROUTER 2002T-3Galle Versionenfixedphoenix_contact_psirtDE
Firmware 2.05.4 installed on TC ROUTER 3002T-4Galle Versionenfixedphoenix_contact_psirtDE
Firmware 2.05.4 installed on TC ROUTER 3002T-4G ATTalle Versionenfixedphoenix_contact_psirtDE
Firmware 2.05.4 installed on TC ROUTER 3002T-4G VZWalle Versionenfixedphoenix_contact_psirtDE
Firmware <=1.03.17 installed on TC CLOUD CLIENT 1002-TXTXalle Versionenphoenix_contact_psirtDE
Firmware <=2.03.17 installed on TC CLOUD CLIENT 1002-4Galle Versionenphoenix_contact_psirtDE
Firmware <=2.03.17 installed on TC CLOUD CLIENT 1002-4G ATTalle Versionenphoenix_contact_psirtDE
Firmware <=2.03.17 installed on TC CLOUD CLIENT 1002-4G VZWalle Versionenphoenix_contact_psirtDE
Firmware <=2.05.3 installed on TC ROUTER 2002T-3Galle Versionenphoenix_contact_psirtDE

20 von 23 angezeigt

Advisories (1)

Hersteller- und Ökosystem-Meldungen dazu.

VDE-2020-003PHOENIX CONTACT: TC Router and TC Cloud Client multiple vulnerabilities2020-03-05csaf · phoenix_contact_psirtDE
Multiple Vulnerabilities exist in components used by the aforementioned products. See CVE-Details for more information.

auch bekannt als (3)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd nvd phoenix_contact_psirt NVD CVE.org MITRE

veröffentlicht 2020-03-12geändert 2026-06-17

verwandt (2,281)

Verwandte Einträge.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2026-22769US	critical10.0OT kritisch	13.5% (96th)	KEV	2026-02-17
Dell RecoverPoint for Virtual Machines, versions prior to 6.0.3.1 HF1, contain a hardcoded credential vulnerability. This is considered critical as an unauthenticated remote attack…
CVE-2025-14611US	critical9.8OT kritisch	53.3% (99th)	KEV	2025-12-12
Gladinet CentreStack and Triofox prior to version 16.12.10420.56791 used hardcoded values for their implementation of the AES cryptoscheme. This degrades security for public expose…
CVE-2025-30406US	critical9.8OT kritisch	94.3% (100th)	KEV	2025-04-03
Gladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) has a deserialization vulnerability due to the CentreStack portal's hardcoded machineKey use, as exploited…
CVE-2024-20439US	critical9.8OT kritisch	97.1% (100th)	KEV	2024-09-04
A vulnerability in Cisco Smart Licensing Utility (CSLU) could allow an unauthenticated, remote attacker to log into an affected system by using a static administrative credential.…
CVE-2024-28987US	critical9.1OT kritisch	93.3% (100th)	KEV	2024-08-21
The SolarWinds Web Help Desk (WHD) software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify da…

+2276 weitere

Referenzen (13)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan