Critical severity9.8NVD Advisory· Published Feb 26, 2019· Updated Jun 17, 2026

CVE-2019-9201

Description

Multiple Phoenix Contact devices allow remote attackers to establish TCP sessions to port 1962 and obtain sensitive information or make changes, as demonstrated by using the Create Backup feature to traverse all directories.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Phoenixcontact/Axc 1050 Firmware
cpe:2.3:o:phoenixcontact:axc_1050_firmware:-:*:*:*:*:*:*:*
Phoenixcontact/Ilc 131 Eth\/xc Firmware
cpe:2.3:o:phoenixcontact:ilc_131_eth\/xc_firmware:-:*:*:*:*:*:*:*
Phoenixcontact/Ilc 131 Eth Firmware
cpe:2.3:o:phoenixcontact:ilc_131_eth_firmware:-:*:*:*:*:*:*:*
Phoenixcontact/Ilc 151 Eth Firmware2 versions
cpe:2.3:o:phoenixcontact:ilc_151_eth\/xc_firmware:-:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:phoenixcontact:ilc_151_eth\/xc_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:phoenixcontact:ilc_151_eth_firmware:-:*:*:*:*:*:*:*
Phoenixcontact/Ilc 171 Eth 2tx Firmware
cpe:2.3:o:phoenixcontact:ilc_171_eth_2tx_firmware:-:*:*:*:*:*:*:*
Phoenixcontact/Ilc 191 Me\/an Firmware2 versions
cpe:2.3:o:phoenixcontact:ilc_191_eth_2tx_firmware:-:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:phoenixcontact:ilc_191_eth_2tx_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:phoenixcontact:ilc_191_me\/an_firmware:-:*:*:*:*:*:*:*
Phoenixcontact/ILC GSM GPRSllm-create

Patches

Vulnerability mechanics

References

medium.com/%40SergiuSechel/misconfiguration-in-ilc-gsm-gprs-devices-leaves-over-1-200-ics-devices-vulnerable-to-attacks-over-82c2d4a91561nvdExploit
cert.vde.com/en/advisories/VDE-2019-015/nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000