CVE-2019-10997
Medium
Description
An issue was discovered on Phoenix Contact AXC F 2152 (No.2404267) before 2019.0 LTS and AXC F 2152 STARTERKIT (No.1046568) before 2019.0 LTS devices. Protocol Fuzzing on PC WORX Engineer by a man in the middle attacker stops the PLC service. The device must be rebooted, or the PLC service must be restarted manually via a Linux shell.
SeverityMedium
CVSS5.9
Exploit probability—
ProductPhoenixcontact Axc F 2152 Firmware
PublishedJun 17, 2019
First seenJun 17, 2019
How to fix
Update
- phoenixcontact axc_f_2152_firmware2019.0_lts or later
- phoenixcontact axc_f_2152_starterkit_firmware2019.0_lts or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phoenixcontact axc_f_2152_firmware | v < 2019.0_lts | 2019.0_lts |
| phoenixcontact axc_f_2152_starterkit_firmware | v < 2019.0_lts | 2019.0_lts |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.