Description (CNA)
An issue was discovered on PHOENIX CONTACT FL NAT SMCS 8TX, FL NAT SMN 8TX, FL NAT SMN 8TX-M, and FL NAT SMN 8TX-M-DMG devices. There is unauthorized access to the WEB-UI by attackers arriving from the same source IP address as an authenticated user, because this IP address is used as a session identifier.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://cert.vde.com/de-de/advisories/vde-2019-006
- https://ics-cert.us-cert.gov/advisories/ICSA-19-155-02
- http://www.securityfocus.com/bid/108576
ADP enrichment
No English description supplied.