CVE-2014-9195 : Phoenix Contact ProConOs and MultiProg do not require authentication, which allo

Phoenix Contact ProConOs and MultiProg do not require authentication, which allows remote attackers to execute arbitrary commands via protocol-compliant traffic.

Published 2015-01-17 02:59:06

Updated 2018-11-29 14:43:56

Source ICS-CERT

View at NVD, CVE.org

Products affected by CVE-2014-9195

Phoenixcontact-software » Multiprog » Version: 5.0 Express Edition
cpe:2.3:a:phoenixcontact-software:multiprog:5.0:*:*:*:express:*:*:*
Matching versions
Phoenixcontact-software » Multiprog » Version: 5.0
cpe:2.3:a:phoenixcontact-software:multiprog:5.0:*:*:*:*:*:*:*
Matching versions
Phoenixcontact-software » Multiprog » Version: 5.0 Pro+ Edition
cpe:2.3:a:phoenixcontact-software:multiprog:5.0:*:*:*:pro\+:*:*:*
Matching versions
Phoenixcontact-software » Proconos Eclr » Visual Studio Edition
cpe:2.3:o:phoenixcontact-software:proconos_eclr:*:*:*:*:visual_studio:*:*:*
Matching versions
Phoenixcontact-software » Proconos Eclr » Single Chip Edition
cpe:2.3:o:phoenixcontact-software:proconos_eclr:*:*:*:*:single_chip:*:*:*
Matching versions
Phoenixcontact-software » Proconos Eclr
cpe:2.3:o:phoenixcontact-software:proconos_eclr:*:*:*:*:*:*:*:*
Matching versions
Phoenixcontact-software » Proconos Eclr » Softplc Edition
cpe:2.3:o:phoenixcontact-software:proconos_eclr:*:*:*:*:softplc:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2014-9195

EPSS FAQ

6.16%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 94 %

Percentile, the proportion of vulnerabilities that are scored at or less

Metasploit modules for CVE-2014-9195

PhoenixContact PLC Remote START/STOP Command

Disclosure Date: 2015-05-20

First seen: 2020-04-26

auxiliary/admin/scada/phoenix_command

PhoenixContact Programmable Logic Controllers are built upon a variant of ProConOS. Communicating using a proprietary protocol over ports TCP/1962 and TCP/41100 or TCP/20547. It allows a remote user to read out the PLC Type, Firmware and Build number on port

More information

CVSS scores for CVE-2014-9195

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P	10.0	6.4	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial

CWE ids for CVE-2014-9195

CWE-255

Assigned by: nvd@nist.gov (Primary)

References for CVE-2014-9195

https://www.exploit-db.com/exploits/37066/

Phoenix Contact ILC 150 ETH PLC - Remote Control Script - Hardware remote Exploit
Third Party Advisory;VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-15-013-03

Phoenix Contact Software ProConOs and MultiProg Authentication Vulnerability | CISA
Third Party Advisory;US Government Resource

Jump to