Multiple Phoenix Contact Products CVE-2019-9201 Security Bypass Vulnerability
BID:107170
Info
Multiple Phoenix Contact Products CVE-2019-9201 Security Bypass Vulnerability
| Bugtraq ID: | 107170 |
| Class: | Design Error |
| CVE: |
CVE-2019-9201 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 03 2019 12:00AM |
| Updated: | Feb 03 2019 12:00AM |
| Credit: | Sergiu Sechel |
| Vulnerable: |
Phoenix Contact ILC 191 ME/AN 0 Phoenix Contact ILC 191 ETH 2TX 0 Phoenix Contact ILC 171 ETH 2TX 0 Phoenix Contact ILC 151 ETH/XC 0 Phoenix Contact ILC 151 ETH 0 Phoenix Contact ILC 131 ETH/XC 0 Phoenix Contact ILC 131 ETH 0 Phoenix Contact AXC 1050 0 |
| Not Vulnerable: | |
Exploit / POC
Multiple Phoenix Contact Products CVE-2019-9201 Security Bypass Vulnerability
The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.
The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.
References
Multiple Phoenix Contact Products CVE-2019-9201 Security Bypass Vulnerability
References:
References:
- Authentication Bypass in ILC GSM/GPRS controllers leaves over 1,200 ICS devices (@SergiuSechel)
- Phoenix Contact Home Page (Phoenix Contact)