VULNERABILITY INTELLIGENCE

CVE-2019-9201

CVSS score9.8 CRITICAL
EPSS probability3.10%
CISA KEVNot currently listed
Published2019-02-26
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Multiple Phoenix Contact devices allow remote attackers to establish TCP sessions to port 1962 and obtain sensitive information or make changes, as demonstrated by using the Create Backup feature to traverse all directories.

Weakness classification

  • CWE-306: Missing Authentication for Critical Function

Primary references