QID 591281

Date Published: 2023-01-13

QID 591281: Phoenix Contact FL NAT SMx Improper Access Control Vulnerability (ICSA-19-155-02, VDE-2019-006)

AFFECTED PRODUCTS
FL NAT SMN 8TX-M (2702443)
FL NAT SMN 8TX-M-DMG (2989352)
FL NAT SMN 8TX (2989365)
FL NAT SMCS 8TX (2989378)

QID Detection Logic:
This QID checks for the Vulnerable version of Phoenix Contact FL NAT SMx using passive scanning.

Successful exploitation of this vulnerability could allow unauthorized users full access to the device configuration.

  • CVSS V3 rated as Critical - 8.8 severity.
  • CVSS V2 rated as High - 6.8 severity.
  • Solution

    Customers are advised to refer to CERT MITIGATIONS section ICSA-19-155-02 for affected packages and patching details.

    Vendor References

    CVEs related to QID 591281

    Software Advisories
    Advisory ID Software Component Link