https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 02:26:43 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-53083 EUVD-2026-53083 https://cve.radiocsirt.org/vuln/euvd-2026-53083 https://cve.radiocsirt.org/vuln/fkie_cve-2019-9744 <p>An issue was discovered on PHOENIX CONTACT FL NAT SMCS 8TX, FL NAT SMN 8TX, FL NAT SMN 8TX-M, and FL NAT SMN 8TX-M-DMG devices. There is unauthorized access to the WEB-UI by attackers arriving from the same source IP address as an authenticated user, because this IP address is used as a session identifier.</p> <p>An issue was discovered on PHOENIX CONTACT FL NAT SMCS 8TX, FL NAT SMN 8TX, FL NAT SMN 8TX-M, and FL NAT SMN 8TX-M-DMG devices. There is unauthorized access to the WEB-UI by attackers arriving from the same source IP address as an authenticated user, because this IP address is used as a session identifier.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-9744 https://cve.radiocsirt.org/vuln/ghsa-p5mw-x2jr-q9g7 <p>An issue was discovered on PHOENIX CONTACT FL NAT SMCS 8TX, FL NAT SMN 8TX, FL NAT SMN 8TX-M, and FL NAT SMN 8TX-M-DMG devices. There is unauthorized access to the WEB-UI by attackers arriving from the same source IP address as an authenticated user, because this IP address is used as a session identifier.</p> <p>An issue was discovered on PHOENIX CONTACT FL NAT SMCS 8TX, FL NAT SMN 8TX, FL NAT SMN 8TX-M, and FL NAT SMN 8TX-M-DMG devices. There is unauthorized access to the WEB-UI by attackers arriving from the same source IP address as an authenticated user, because this IP address is used as a session identifier.</p> https://cve.radiocsirt.org/vuln/ghsa-p5mw-x2jr-q9g7 https://cve.radiocsirt.org/vuln/gsd-2019-9744 gsd-2019-9744 https://cve.radiocsirt.org/vuln/gsd-2019-9744 https://cve.radiocsirt.org/vuln/icsa-19-155-02 <p>An unauthorized user can access the web interface using an authorized IP address, which may allow full access to the device configuration. This attack is only possible if an authorized session is still active on the system.CVE-2019-9744 has been assigned to this vulnerability. A CVSS v3 base score of 8.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H).</p> <p>An unauthorized user can access the web interface using an authorized IP address, which may allow full access to the device configuration. This attack is only possible if an authorized session is still active on the system.CVE-2019-9744 has been assigned to this vulnerability. A CVSS v3 base score of 8.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H).</p> https://cve.radiocsirt.org/vuln/icsa-19-155-02 https://cve.radiocsirt.org/vuln/vde-2019-006 <p>After login the source IP is used as the session identifier, so that users sharing the same source IP are able to gain full authenticated access to the WEB-UI.</p> <p>The access attempt will only be successful if the former authorized session has not been terminated by the authorized user or by session timeout.</p> <p>After login the source IP is used as the session identifier, so that users sharing the same source IP are able to gain full authenticated access to the WEB-UI.</p> <p>The access attempt will only be successful if the former authorized session has not been terminated by the authorized user or by session timeout.</p> https://cve.radiocsirt.org/vuln/vde-2019-006