Description
An issue was discovered on Phoenix Contact Emalytics Controller ILC 2050 BI before 1.2.3 and BI-L before 1.2.3 devices. There is an insecure mechanism for read and write access to the configuration of the device. The mechanism can be discovered by examining a link on the website of the device.
Advisories 2
- VDE-2020-001 PHOENIX CONTACT: Emalytics Controller ILC 2050 BI(L) allows unauthorised read and write access to the configuration file CERT@VDE · May 22, 2025
- ICSA-20-063-02 ICSA-20-063-02_PHOENIX CONTACT Emalytics Controller ILC CISA ICS & IT advisories · Mar 3, 2020