high8.8
CVE-2019-9744
An issue was discovered on PHOENIX CONTACT FL NAT SMCS 8TX, FL NAT SMN 8TX, FL NAT SMN 8TX-M, and FL NAT SMN 8TX-M-DMG devices.
Impact
An issue was discovered on PHOENIX CONTACT FL NAT SMCS 8TX, FL NAT SMN 8TX, FL NAT SMN 8TX-M, and FL NAT SMN 8TX-M-DMG devices. There is unauthorized access to the WEB-UI by attackers arriving from the same source IP address as an authenticated user, because this IP address is used as a session identifier.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phoenixcontact | Fl Nat Smn 8tx-M-Dmg Firmware | All versions |
| Phoenixcontact | Fl Nat Smn 8tx-M Firmware | All versions |
| Phoenixcontact | Fl Nat Smn 8tx Firmware | All versions |
| Phoenixcontact | Fl Nat Smcs 8tx Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/108576
- https://cert.vde.com/de-de/advisories/vde-2019-006
- https://ics-cert.us-cert.gov/advisories/ICSA-19-155-02
- http://www.securityfocus.com/bid/108576
- https://cert.vde.com/de-de/advisories/vde-2019-006
- https://ics-cert.us-cert.gov/advisories/ICSA-19-155-02