PT-2019-12128 · Phoenix Contact+1 · Pc Worx Engineer+3

Publicado 2019-06-17 · Atualizado 2020-08-24 · CVE-2019-10997

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Phoenix Contact AXC F 2152 versions prior to 2019.0 LTS Phoenix Contact AXC F 2152 STARTERKIT versions prior to 2019.0 LTS

Description An issue was discovered where protocol fuzzing by a man-in-the-middle attacker on PC WORX Engineer can stop the PLC service, requiring a device reboot or manual restart of the PLC service via a Linux shell.

Recommendations For Phoenix Contact AXC F 2152 versions prior to 2019.0 LTS, update to version 2019.0 LTS or later. For Phoenix Contact AXC F 2152 STARTERKIT versions prior to 2019.0 LTS, update to version 2019.0 LTS or later.

Correção

Identificadores relacionados

CVE-2019-10997

Produtos afetados

Linux

Pc Worx Engineer

Phoenix Contact Axc F 2152

Phoenix Contact Axc F 2152 Starterkit

Referências · 3

• https://dam-mdc.phoenixcontact.com/asset/156443151564/fa7be4d04c301f18c6cc0e0872193a42/Security_Advisory_AXC_F_2152_FW.pdf · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-10997 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-10997 · Aviso do Fabricante