{"id":"CVE-2019-9201","aliases":["EUVD-2019-18577","GHSA-ww84-8v4x-pvhp"],"status":"published","title":"Phoenix Contact ILC 131 ETH, ILC 131 ETH/XC, ILC 151 ETH, ILC 151 ETH/XC, ILC 171 ETH 2TX, ILC...","description":"Multiple Phoenix Contact devices allow remote attackers to establish TCP sessions to port 1962 and obtain sensitive information or make changes, as demonstrated by using the Create Backup feature to traverse all directories.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.03164,"percentile":0.88103,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-306"],"published":"2019-02-26T23:00:00Z","modified":"2026-06-17T02:43:20Z","products":[{"vendor":"phoenixcontact","product":"axc_1050_firmware"},{"vendor":"phoenixcontact","product":"ilc_131_eth\\/xc_firmware"},{"vendor":"phoenixcontact","product":"ilc_131_eth_firmware"},{"vendor":"phoenixcontact","product":"ilc_151_eth\\/xc_firmware"},{"vendor":"phoenixcontact","product":"ilc_151_eth_firmware"},{"vendor":"phoenixcontact","product":"ilc_171_eth_2tx_firmware"},{"vendor":"phoenixcontact","product":"ilc_191_eth_2tx_firmware"},{"vendor":"phoenixcontact","product":"ilc_191_me\\/an_firmware"}],"references":[{"url":"https://medium.com/%40SergiuSechel/misconfiguration-in-ilc-gsm-gprs-devices-leaves-over-1-200-ics-devices-vulnerable-to-attacks-over-82c2d4a91561","tags":["x_refsource_MISC","x_transferred","Exploit"]},{"url":"https://cert.vde.com/en/advisories/VDE-2019-015/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9201"},{"url":"https://medium.com/@SergiuSechel/misconfiguration-in-ilc-gsm-gprs-devices-leaves-over-1-200-ics-devices-vulnerable-to-attacks-over-82c2d4a91561"},{"url":"https://cert.vde.com/en/advisories/VDE-2019-015"},{"url":"https://github.com/advisories/GHSA-ww84-8v4x-pvhp"}],"sources":{"cve":[{"id":"CVE-2019-9201","description":"Multiple Phoenix Contact devices allow remote attackers to establish TCP sessions to port 1962 and obtain sensitive information or make changes, as demonstrated by using the Create Backup feature to traverse all directories.","status":"published","published":"2019-02-26T23:00:00Z","modified":"2026-06-02T20:15:38.573Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T14:20:20.081405Z"}],"euvd":[{"id":"EUVD-2019-18577","description":"Multiple Phoenix Contact devices allow remote attackers to establish TCP sessions to port 1962 and obtain sensitive information or make changes, as demonstrated by using the Create Backup feature to traverse all directories.","status":"published","published":"2019-02-26T23:00:00Z","modified":"2026-06-02T20:15:38Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T18:20:55.231104Z"}],"ghsa":[{"id":"GHSA-ww84-8v4x-pvhp","title":"Phoenix Contact ILC 131 ETH, ILC 131 ETH/XC, ILC 151 ETH, ILC 151 ETH/XC, ILC 171 ETH 2TX, ILC...","description":"Phoenix Contact ILC 131 ETH, ILC 131 ETH/XC, ILC 151 ETH, ILC 151 ETH/XC, ILC 171 ETH 2TX, ILC 191 ETH 2TX, ILC 191 ME/AN, and AXC 1050 devices allow remote attackers to establish TCP sessions to port 1962 and obtain sensitive information or make changes, as demonstrated by using the Create Backup feature to traverse all directories.","status":"published","published":"2022-05-13T01:23:03Z","modified":"2024-02-23T05:08:08Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T14:55:37.87337Z"}],"nvd":[{"id":"CVE-2019-9201","description":"Multiple Phoenix Contact devices allow remote attackers to establish TCP sessions to port 1962 and obtain sensitive information or make changes, as demonstrated by using the Create Backup feature to traverse all directories.","status":"published","published":"2019-02-26T23:29:00.357Z","modified":"2026-06-17T02:43:20.637Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":9,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T14:05:04.689371Z"}]}}