Details of VAR-201906-1031

ID

VAR-201906-1031

CVE

CVE-2019-10998

TITLE

Phoenix Contact AXC F 2152 and AXC F 2152 STARTERKIT Authentication vulnerabilities in devices

Trust: 0.8

sources: JVNDB: JVNDB-2019-005605

DESCRIPTION

An issue was discovered on Phoenix Contact AXC F 2152 (No.2404267) before 2019.0 LTS and AXC F 2152 STARTERKIT (No.1046568) before 2019.0 LTS devices. Unlimited physical access to the PLC may lead to a manipulation of SD cards data. SD card manipulation may lead to an authentication bypass opportunity. Phoenix Contact AXC F 2152 and AXC F 2152 STARTERKIT The device contains an authentication vulnerability.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. Phoenix Contact PLCNext AXC F 2152 is a programmable logic controller from Phoenix Contact, Germany. An information-disclosure vulnerability. 2. An authentication-bypass vulnerability. 3. A denial-of-service vulnerability. Attackers can exploit these issues to bypass the authentication process, obtain sensitive information, perform unauthorized actions and crash the service, denying service to legitimate users

Trust: 2.43

sources: NVD: CVE-2019-10998 // JVNDB: JVNDB-2019-005605 // CNVD: CNVD-2020-02972 // BID: 108688

IOT TAXONOMY

category:

['ICS', 'Network device']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2020-02972

AFFECTED PRODUCTS

vendor:	phoenixcontact	model:	axc f 2152	scope:	lt	version:	2019.0_lts	Trust: 1.0
vendor:	phoenixcontact	model:	axc f 2152 starterkit	scope:	lt	version:	2019.0_lts	Trust: 1.0
vendor:	phoenix contact	model:	axc f 2152 starterkit	scope:	lt	version:	2019.0 lts	Trust: 0.8
vendor:	phoenix contact	model:	axc f 2152	scope:	lt	version:	2019.0 lts	Trust: 0.8
vendor:	phoenix	model:	contact plcnext axc f	scope:	eq	version:	21521.*	Trust: 0.6
vendor:	phoenix	model:	contact axc f starterkit	scope:	eq	version:	21521.x	Trust: 0.3
vendor:	phoenix	model:	contact axc f	scope:	eq	version:	21521.x	Trust: 0.3
vendor:	phoenix	model:	contact axc f starterkit lts	scope:	ne	version:	21522019.0	Trust: 0.3
vendor:	phoenix	model:	contact axc f lts	scope:	ne	version:	21522019.0	Trust: 0.3

sources: CNVD: CNVD-2020-02972 // BID: 108688 // JVNDB: JVNDB-2019-005605 // NVD: CVE-2019-10998

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2019-10998
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2019-10998
value:	MEDIUM
Trust: 0.8
CNVD:	CNVD-2020-02972
value:	MEDIUM
Trust: 0.6
CNNVD:	CNNVD-201906-092
value:	MEDIUM
Trust: 0.6

nvd@nist.gov:	CVE-2019-10998
severity:	MEDIUM
baseScore:	4.6
vectorString:	AV:L/AC:L/AU:N/C:P/I:P/A:P
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	3.9
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
CNVD:	CNVD-2020-02972
severity:	MEDIUM
baseScore:	4.6
vectorString:	AV:L/AC:L/AU:N/C:P/I:P/A:P
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	3.9
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6

nvd@nist.gov:	CVE-2019-10998
baseSeverity:	MEDIUM
baseScore:	6.8
vectorString:	CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector:	PHYSICAL
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	0.9
impactScore:	5.9
version:	3.0
Trust: 1.8

sources: CNVD: CNVD-2020-02972 // JVNDB: JVNDB-2019-005605 // CNNVD: CNNVD-201906-092 // NVD: CVE-2019-10998

PROBLEMTYPE DATA

problemtype:

CWE-287

Trust: 1.8

sources: JVNDB: JVNDB-2019-005605 // NVD: CVE-2019-10998

THREAT TYPE

remote or local

Trust: 0.6

sources: CNNVD: CNNVD-201906-092

TYPE

authorization issue

Trust: 0.6

sources: CNNVD: CNNVD-201906-092

CONFIGURATIONS

sources: JVNDB: JVNDB-2019-005605

PATCH

title:	VDE-2019-009	url:	https://dam-mdc.phoenixcontact.com/asset/156443151564/fa7be4d04c301f18c6cc0e0872193a42/Security_Advisory_AXC_F_2152_FW.pdf	Trust: 0.8
title:	Patch for Phoenix Contact PLCNext AXC F 2152 Authorization Issue Vulnerability	url:	https://www.cnvd.org.cn/patchInfo/show/198329	Trust: 0.6
title:	Phoenix Contact PLCNext AXC F 2152 Fixes for access control error vulnerabilities	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=93181	Trust: 0.6

sources: CNVD: CNVD-2020-02972 // JVNDB: JVNDB-2019-005605 // CNNVD: CNNVD-201906-092

EXTERNAL IDS

db:	NVD	id:	CVE-2019-10998	Trust: 3.3
db:	ICS CERT	id:	ICSA-19-155-01	Trust: 2.3
db:	BID	id:	108688	Trust: 0.9
db:	JVNDB	id:	JVNDB-2019-005605	Trust: 0.8
db:	CNVD	id:	CNVD-2020-02972	Trust: 0.6
db:	CNNVD	id:	CNNVD-201906-092	Trust: 0.6

sources: CNVD: CNVD-2020-02972 // BID: 108688 // JVNDB: JVNDB-2019-005605 // CNNVD: CNNVD-201906-092 // NVD: CVE-2019-10998

REFERENCES

url:	https://dam-mdc.phoenixcontact.com/asset/156443151564/fa7be4d04c301f18c6cc0e0872193a42/security_advisory_axc_f_2152_fw.pdf	Trust: 1.9
url:	https://ics-cert.us-cert.gov/advisories/icsa-19-155-01	Trust: 1.5
url:	https://nvd.nist.gov/vuln/detail/cve-2019-10998	Trust: 1.4
url:	https://www.phoenixcontact.com/online/portal/pc/pxc/offcontext/insite_landing_page/!ut/p/z1/xzrrt4mwfiv_dy_kdtc19zhgsowfudkn0bdsogb1fobi0h8v00czwczevjrnzjn33jb9gemixiuzkksjki0o3tnijgbw2l0t8cxnlm-hlvus	Trust: 0.9
url:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-10998	Trust: 0.8
url:	https://www.us-cert.gov/ics/advisories/icsa-19-155-01	Trust: 0.8
url:	https://www.securityfocus.com/bid/108688	Trust: 0.6
url:	https://www.phoenixcontact.com/online/portal/pc	Trust: 0.3

sources: CNVD: CNVD-2020-02972 // BID: 108688 // JVNDB: JVNDB-2019-005605 // CNNVD: CNNVD-201906-092 // NVD: CVE-2019-10998

CREDITS

Zahra Khani of Firmalyzer and OPC Foundation.

Trust: 0.3

sources: BID: 108688

SOURCES

db:	CNVD	id:	CNVD-2020-02972
db:	BID	id:	108688
db:	JVNDB	id:	JVNDB-2019-005605
db:	CNNVD	id:	CNNVD-201906-092
db:	NVD	id:	CVE-2019-10998

LAST UPDATE DATE

2024-08-14T13:44:56.506000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2020-02972	date:	2020-01-21T00:00:00
db:	BID	id:	108688	date:	2019-06-04T00:00:00
db:	JVNDB	id:	JVNDB-2019-005605	date:	2019-07-09T00:00:00
db:	CNNVD	id:	CNNVD-201906-092	date:	2019-07-02T00:00:00
db:	NVD	id:	CVE-2019-10998	date:	2019-06-20T20:15:57.857

SOURCES RELEASE DATE

db:	CNVD	id:	CNVD-2020-02972	date:	2020-01-21T00:00:00
db:	BID	id:	108688	date:	2019-06-04T00:00:00
db:	JVNDB	id:	JVNDB-2019-005605	date:	2019-06-24T00:00:00
db:	CNNVD	id:	CNNVD-201906-092	date:	2019-06-04T00:00:00
db:	NVD	id:	CVE-2019-10998	date:	2019-06-18T13:15:10.707