Most recent entries from csaf_phoenixcontactgmbhcokg

VDE-2018-005 — Phoenix Contact: FL SWITCH 3xxx/4xxx/48xx series through 1.33 allows Information Exposure

Wed, 16 May 2018 05:35:00 +0000

Web interface CGI applications may copy the contents of the running configuration file to a commonly accessed file. Clever manipulation of a web login request can expose the contents of this file through to the web browser. A successful web interface login attempt is not required to read the configuration file contents.

FL SWITCH Configuration File can be read by unauthenticated user.

VDE-2018-012 — PHOENIX CONTACT: ILC 1x1 ETH Denial of Service

Mon, 13 Aug 2018 11:55:00 +0000

The processing program of the IEC 61131 program can be slowed down or stopped completely by creating a large amount of network traffic that needs to be handled by the ILC.

VDE-2018-015 — Phoenix Contact: AXL F BK PN Denial of Service Vulnerability

Fri, 21 Sep 2018 07:03:00 +0000

Incorrect handling request with non-standard symbols allows remote attackers to initiate a complete lock up of the bus coupler. Authentication of the request is not required.

VDE-2020-013 — PHOENIX CONTACT: Local Privilege Escalation in Portico Remote desktop control software

Fri, 27 Mar 2020 09:48:00 +0000

If the software runs as a service, a user with limited access can gain administrator privileges by starting a shell with administrator rights from the Import / Export configuration dialog.

VDE-2020-018 — PHOENIX CONTACT: FL MGUARD, TC MGUARD, TC ROUTER and TC CLOUD CLIENT: PPPD vulnerable to CVE-2020-8597

Tue, 02 Jun 2020 08:42:00 +0000

FL MGUARD, TC MGUARD, TC ROUTER and TC CLOUD CLIENT devices are affected by a buffer overflow vulnerability within the PPP service.

The PPP service is not active by default, but is used commonly at TC ROUTER, TC CLOUD CLIENT. It is also running in the following FL MGUARD and TC MGUARD configurations:

• Mobile data connection • Router mode "Modem" • Router mode "PPPoE" • L2TP over IPsec

Malicious PPP peers could try to exploit the vulnerability from remote.

VDE-2020-030 — PHOENIX CONTACT: Products utilizing WIBU-SYSTEMS CodeMeter components

Wed, 09 Sep 2020 06:22:00 +0000

Several vulnerabilities have been discovered in WIBU-SYSTEMS CodeMeter and published 08 September 2020. Phoenix Contact is only affected by a subset of these vulnerabilities.

Phoenix Contact products are not affected by vulnerabilities WIBU-200521-01 (CVE-2020- 14513), WIBU-200521-04 (CVE-2020-14517, and WIBU-200521-06 (CVE-2020-14515). For further Information please refer to WIBU Advisories directly at https://wibu.com/support/security-advisories.html

VDE-2020-049 — Phoenix Contact: Multiple vulnerabilities in PLCnext Control devices < 2021.0 LTS

Thu, 17 Dec 2020 09:00:00 +0000

Multiple vulnerabilities have been identified in PLCnext Control devices. Please consult the aforementioned CVE-IDs.

VDE-2021-046 — PHOENIX CONTACT: XSS and memory-leak in FL MGUARD 1102/1105

Wed, 10 Nov 2021 07:23:00 +0000

Cross-site scripting in web-based management and memory leak in the remote logging function of FL MGUARD 1102 and FL MGUARD 1105.

CVE-2021-34582: The file upload functionality in the web-based management is affected by a stored cross-site scripting vulnerability (CWE-79: Improper Neutralization of Input During Web Page Generation). An authenticated FL MGUARD user with Admin or Super Admin role can upload a certificate file on the Basic settings > LDAP page, on the Logs > Remote logging page, or through the REST API. The content of this file is embedded into the corresponding web page, and any HTML code within the file is rendered when the page is viewed by the same or a different authenticated user.

CVE-2021-34598: The remote logging functionality is impaired by the lack of memory release for data structures from syslog-ng when remote logging is active (CWE-770: Allocation of Resources Without Limits or Throttling).

VDE-2022-018 — PHOENIX CONTACT: Multiple vulnerabilities in RAD-ISM-900-EN-BD devices

Wed, 11 May 2022 14:20:00 +0000

On various RAD-ISM-900-EN-* devices by PHOENIX CONTACT an admin user could use the traceroute utility integrated in the WebUI to execute arbitrary code with root privileges on the OS due to an improper input validation in all versions of the firmware. On various RAD-ISM-900-EN-* devices by PHOENIX CONTACT an admin user could use the configuration file uploader in the WebUI to execute arbitrary code with root privileges on the OS due to an improper validation of an integrity check value in all versions of the firmware.

VDE-2023-004 — Phoenix Contact: Directory Traversal Vulnerability in ENERGY AXC PU Web service

Tue, 11 Apr 2023 08:00:00 +0000

A Directory Traversal Vulnerability enables arbitrary file access in ENERGY AXC PU Web service.An authenticated restricted user of the web frontend can access, read, write and create files throughout the file system using specially crafted URLs via the upload and download functionality of the web service.