CVE-2019-9201

9.8 criticalEPSS 3.2%

Multiple Phoenix Contact devices allow remote attackers to establish TCP sessions to port 1962 and obtain sensitive information or make changes, as demonstrated by using the Create Backup feature to traverse all directories.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 3.2% chance of exploitation in the next 30 days; higher than 88% of CVEs (scores of 2026-10-31)
CWE: CWE-306
Published: 2019-02-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

phoenixcontact:axc_1050_firmware
phoenixcontact:ilc_131_eth\/xc_firmware
phoenixcontact:ilc_131_eth_firmware
phoenixcontact:ilc_151_eth\/xc_firmware
phoenixcontact:ilc_151_eth_firmware
phoenixcontact:ilc_171_eth_2tx_firmware
phoenixcontact:ilc_191_eth_2tx_firmware
phoenixcontact:ilc_191_me\/an_firmware

References

https://cert.vde.com/en/advisories/VDE-2019-015/
https://medium.com/%40SergiuSechel/misconfiguration-in-ilc-gsm-gprs-devices-leaves-over-1-200-ics-devices-vulnerable-to-attacks-over-82c2d4a91561
https://cert.vde.com/en/advisories/VDE-2019-015/
https://medium.com/%40SergiuSechel/misconfiguration-in-ilc-gsm-gprs-devices-leaves-over-1-200-ics-devices-vulnerable-to-attacks-over-82c2d4a91561

Check your stack JSON