Skip to content
OpenAdvisories
High · 8.8 CVE-2020-12519 EUVD-2020-4821GHSA-26hg-qjgg-2868

Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS: An attacker can use this vulnerability i.e. to open a reverse shell with root privileges.

Published Dec 17, 2020 · Updated Sep 17, 2024 · Assigned by CERTVDE

Vendor: Phoenix Contact Product: AXC F 1152 (1151412) Product: AXC F 2152 (2404267) Product: AXC F 2152 Starterkit (1046568) Product: AXC F 3152 (1069208) Product: PLCnext Technology Starterkit (1188165) Product: RFC 4072S (1051328 Category: ICS / OT

Description

On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an attacker can use this vulnerability i.e. to open a reverse shell with root privileges.

Affected products

VendorProductAffectedFixed
Phoenix Contact AXC F 1152 (1151412) unspecified – < 2021.0 LTS 2021.0 LTS
Phoenix Contact AXC F 2152 (2404267) unspecified – < 2021.0 LTS 2021.0 LTS
Phoenix Contact AXC F 3152 (1069208) unspecified – < 2021.0 LTS 2021.0 LTS
Phoenix Contact RFC 4072S (1051328 unspecified – < 2021.0 LTS 2021.0 LTS
Phoenix Contact AXC F 2152 Starterkit (1046568) unspecified – < 2021.0 LTS 2021.0 LTS
Phoenix Contact PLCnext Technology Starterkit (1188165) unspecified – < 2021.0 LTS 2021.0 LTS

Advisories 1

References