Multiple Phoenix Contact Products CVE-2019-9743 Command Injection Vulnerability

Bugtraq ID:	107596
Class:	Input Validation Error
CVE:	CVE-2019-9743
Remote:	Yes
Local:	No
Published:	Mar 26 2019 12:00AM
Updated:	Mar 26 2019 12:00AM
Credit:	Maxim Rupp (RuppIT)
Vulnerable:	Phoenix Contact RAD-80211-XD/HP-BUS-2900047 0 Phoenix Contact RAD-80211-XD-2885728 0
Not Vulnerable:

Multiple Phoenix Contact Products CVE-2019-9743 Command Injection Vulnerability

Multiple Phoenix Contact Products are prone to an remote command-injection vulnerability.

Successfully exploiting this issue may allow an attacker to execute arbitrary OS commands on the server. Failed exploit attempts may cause a denial-of-service condition.

The following products of Phoenix Contact are affected:

RAD-80211-XD (2885728)
RAD-80211-XD/HP-BUS (2900047)

Multiple Phoenix Contact Products CVE-2019-9743 Command Injection Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple Phoenix Contact Products CVE-2019-9743 Command Injection Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple Phoenix Contact Products CVE-2019-9743 Command Injection Vulnerability

References:

• Phoenix Contact Home Page (Phoenix Contact)
  
• ICSA-19-085-02: PHOENIX CONTACT RAD-80211-XD (ICS CERT)