CVE-2020-14483

A vendor fix is available.

• Fixedphoenix_contact_psirt

  This vulnerability will be fixed in the regular firmware release (v.1.4.0) which is expected to be available October 2020.

• FixedNiagaracisa_csaf_ot

  Niagara Enterprise Security 4.9.0.60

• FixedNiagara Enterprise Securitycisa_csaf_ot

  Niagara Enterprise Security 4.9.0.60

• Mitigationphoenix_contact_psirt

  Phoenix Contact recommends customers with affected products take the following steps to protect themselves: • Review and validate the list of users who are authorized and who can authenticate to Emalytics. • Allow only trained and trusted persons to have physical access to the system, including devices that have connection to the system though the Ethernet port. Phoenix Contact recommends operating network-capable devices in closed networks or protected with a suitable firewall. For detailed information on our recommendations for measures to protect network-capable devices, please refer to our application note: Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY 'Measures to protect network-capable devices with Ethernet connection against unauthorized access' external link

• MitigationNiagaracisa_csaf_ot

  Allow only trained and trusted persons to have physical access to the system, including devices with connection to the system though the Ethernet port.

• MitigationNiagara Enterprise Securitycisa_csaf_ot

  Allow only trained and trusted persons to have physical access to the system, including devices with connection to the system though the Ethernet port.