Phoenix Contact FL NAT SMx Ethernet Switches CVE-2019-9744 Authorization Bypass Vulnerability

Bugtraq ID:	108576
Class:	Design Error
CVE:	CVE-2019-9744
Remote:	Yes
Local:	No
Published:	Jun 05 2019 12:00AM
Updated:	Jun 05 2019 12:00AM
Credit:	Maxim Rupp
Vulnerable:	Phoenix Contact FL NAT SMN 8TX-M-DMG 0 Phoenix Contact FL NAT SMN 8TX-M 0 Phoenix Contact FL NAT SMN 8TX 0 Phoenix Contact FL NAT SMCS 8TX 0
Not Vulnerable:

Phoenix Contact FL NAT SMx Ethernet Switches CVE-2019-9744 Authorization Bypass Vulnerability

Phoenix Contact FL NAT SMx Industrial Ethernet Switches are prone to an security-bypass vulnerability.

Attackers can exploit this issue to bypass certain security restrictions and perform certain unauthorized actions. This may aid in further attacks.

Phoenix Contact FL NAT SMx Ethernet Switches CVE-2019-9744 Authorization Bypass Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Phoenix Contact FL NAT SMx Ethernet Switches CVE-2019-9744 Authorization Bypass Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Phoenix Contact FL NAT SMx Ethernet Switches CVE-2019-9744 Authorization Bypass Vulnerability

References:

• Phoenix Contact Home Page (Phoenix Contact)
  
• ICSA-19-155-02 PHOENIX CONTACT FL NAT SMx (CERT)