CVE-2019-9201
9.8
CRITICAL · CVSS 3.1 · EPSS 3.1% (pctl 87)
In your normal cycle
Critical by CVSS (9.8), but no sign of active exploitation.
Description
Multiple Phoenix Contact devices allow remote attackers to establish TCP sessions to port 1962 and obtain sensitive information or make changes, as demonstrated by using the Create Backup feature to traverse all directories.
Scoring
| CVSS | 9.8 (CRITICAL, v3.1) |
|---|---|
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 3.1% — more likely to be exploited than 87% of all CVEs |
| Weakness | CWE-306 |
| On CISA KEV | no |
| Public exploit | none known |
| Published | 2019-02-26 |
| Last modified | 2026-06-17 |
Affected (16)
| Vendor | Product |
|---|---|
| phoenixcontact | axc 1050 |
| phoenixcontact | axc 1050 firmware |
| phoenixcontact | ilc 131 eth |
| phoenixcontact | ilc 131 eth firmware |
| phoenixcontact | ilc 131 eth\/xc |
| phoenixcontact | ilc 131 eth\/xc firmware |
| phoenixcontact | ilc 151 eth |
| phoenixcontact | ilc 151 eth firmware |
| phoenixcontact | ilc 151 eth\/xc |
| phoenixcontact | ilc 151 eth\/xc firmware |
| phoenixcontact | ilc 171 eth 2tx |
| phoenixcontact | ilc 171 eth 2tx firmware |
| phoenixcontact | ilc 191 eth 2tx |
| phoenixcontact | ilc 191 eth 2tx firmware |
| phoenixcontact | ilc 191 me\/an |
| phoenixcontact | ilc 191 me\/an firmware |
References
- https://cert.vde.com/en/advisories/VDE-2019-015/
- https://medium.com/%40SergiuSechel/misconfiguration-in-ilc-gsm-gprs-devices-leaves-over-1-200-ics-devices-vulnerable-to-attacks-over-82c2d4a91561
- https://cert.vde.com/en/advisories/VDE-2019-015/
- https://medium.com/%40SergiuSechel/misconfiguration-in-ilc-gsm-gprs-devices-leaves-over-1-200-ics-devices-vulnerable-to-attacks-over-82c2d4a91561
→ the Explorer · watch your stack · NVD