CVE-2019-10998

Name of the Vulnerable Software and Affected Versions Phoenix Contact AXC F 2152 versions prior to 2019.0 LTS Phoenix Contact AXC F 2152 STARTERKIT versions prior to 2019.0 LTS

Description An issue allows unlimited physical access to the Programmable Logic Controller (PLC), which may lead to manipulation of SD card data. This SD card manipulation can result in an authentication bypass opportunity.

Recommendations For Phoenix Contact AXC F 2152 versions prior to 2019.0 LTS, update to version 2019.0 LTS or later to resolve the issue. For Phoenix Contact AXC F 2152 STARTERKIT versions prior to 2019.0 LTS, update to version 2019.0 LTS or later to resolve the issue.