CRITICAL🇵🇱 Wersja polska

CVE-2019-9201

CVSS 9.8v3.1pub. 2019-02-26upd. 2026-06-02

Multiple Phoenix Contact devices allow remote attackers to establish TCP sessions to port 1962 and obtain sensitive information or make changes, as demonstrated by using the Create Backup feature to traverse all directories.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Phoenixcontact Axc 1050

    HW
    Phoenixcontact
    all versions

  • Phoenixcontact Axc 1050 Firmware

    OS
    Phoenixcontact
    all versions

  • Phoenixcontact Ilc 131 Eth

    HW
    Phoenixcontact
    all versions

  • Phoenixcontact Ilc 131 Eth Firmware

    OS
    Phoenixcontact
    all versions

  • Phoenixcontact Ilc 131 Eth\/xc

    HW
    Phoenixcontact
    all versions

  • Phoenixcontact Ilc 131 Eth\/xc Firmware

    OS
    Phoenixcontact
    all versions

  • Phoenixcontact Ilc 151 Eth

    HW
    Phoenixcontact
    all versions

  • Phoenixcontact Ilc 151 Eth Firmware

    OS
    Phoenixcontact
    all versions

  • Phoenixcontact Ilc 151 Eth\/xc

    HW
    Phoenixcontact
    all versions

  • Phoenixcontact Ilc 151 Eth\/xc Firmware

    OS
    Phoenixcontact
    all versions

  • Phoenixcontact Ilc 171 Eth 2tx

    HW
    Phoenixcontact
    all versions

  • Phoenixcontact Ilc 171 Eth 2tx Firmware

    OS
    Phoenixcontact
    all versions

  • Phoenixcontact Ilc 191 Eth 2tx

    HW
    Phoenixcontact
    all versions

  • Phoenixcontact Ilc 191 Eth 2tx Firmware

    OS
    Phoenixcontact
    all versions

  • Phoenixcontact Ilc 191 Me\/an

    HW
    Phoenixcontact
    all versions

  • Phoenixcontact Ilc 191 Me\/an Firmware

    OS
    Phoenixcontact
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2023-46141CRITICAL9.8PL ✓same product

Phoenix Contact: nieuprawniony zdalny dostęp do urządzeń linii klasycznej

CVE-2022-31800CRITICAL9.8PL ✓same product

Phoenix Contact AXC: nieautoryzowane wgranie złośliwego kodu do sterownika PLC

CVE-2023-46143HIGH7.5same product

Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT classic line PLCs allows an unauthen...

CVE-2019-10953HIGH7.5same product

ABB, Phoenix Contact, Schneider Electric, Siemens, WAGO - Programmable Logic Controllers, multiple versions. R...

CVE-2025-25270CRITICAL9.8PL ✓same vendor

RCE jako root w sterownikach ładowania Phoenix Contact CHARX SEC-3x00