CVE-2019-9201 Missing authorization in n/a
Remote attackers can access sensitive information or modify data on Phoenix Contact devices via port 1962 without authentication.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-9201?
CVE-2019-9201 is a critical missing authorization vulnerability in n/a, published on 26 Feb 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Multiple Phoenix Contact devices allow remote attackers to establish TCP sessions to port 1962 and obtain sensitive information or make changes, as demonstrated by using the Create Backup feature to traverse all directories.
Weakness: CWE-306
Which versions are affected by CVE-2019-9201?
It affects 8 products.
Products include Phoenixcontact Axc 1050 Firmware, Phoenixcontact Ilc 131 Eth\/Xc Firmware, Phoenixcontact Ilc 131 Eth Firmware, Phoenixcontact Ilc 151 Eth\/Xc Firmware, Phoenixcontact Ilc 151 Eth Firmware, Phoenixcontact Ilc 171 Eth 2tx Firmware and 2 more.
How do I fix CVE-2019-9201?
No fix has been published for CVE-2019-9201 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2019-9201 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2019-9201 exists.
Other vulnerabilities in n/a
Sources
Also known as GHSA-ww84-8v4x-pvhp.