Summary
A WebHMI utility may be exploited by any logged in user allowing the execution of arbitrary OS commands on the server. This provides the opportunity for a command injection attack.
Details
Impact
If vulnerability is exploited, the attacker may execute system level commands at will with administrative privileges.
Mitigation
Customers using Phoenix Contact 802-11XD radio modules are recommended to operate the devices in closed networks or protected with a suitable firewall.
For detailed information on our recommendations for measures to protect network-capable devices, please refer to the [Application Note:](https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf)
Remediation
The product has been removed from active maintenance due to obsolescence. For this reason, it is recommended that concerned customers upgrade to the active FL WLAN product line.
Vulnerabilities 1
-
Unscored —
An issue was discovered on PHOENIX CONTACT RAD-80211-XD and RAD-80211-XD/HP-BUS devices. Command injection can occur in…
Revision history
-
#3
Fix: version term, added distribution
-
#2
Fix: correct certvde domain, added alias, added self-reference
-
#1
Initial revision.
References
-
CERT@VDE Security Advisories for Phoenix Contact
https://certvde.com/en/advisories/vendor/phoenixcontact/
-
VDE-2019-007: PHOENIX CONTACT: command injection on RAD-80211-XD(/HP-BUS) - HTML
https://certvde.com/en/advisories/VDE-2019-007