CVE-2018-16994
Last modified
CVE-2018-16994 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. An issue was discovered on PHOENIX CONTACT AXL F BK PN <=1.0.4, AXL F BK ETH <= 1.12, and AXL F BK ETH XC <= 1.11 devices and Bosch Rexroth S20-ETH-BK and Rexroth S20-PN-BK+ (the S20-PN-BK+/S20-ETH-BK fieldbus couplers sold by Bosch Rexroth contain technology from Phoenix Contact). Incorrect handling of a request with non-standard symbols allows remote attackers to initiate a complete lock up of the bus coupler. EPSS estimates a 1.57% chance of exploitation in the next 30 days.
Description
An issue was discovered on PHOENIX CONTACT AXL F BK PN <=1.0.4, AXL F BK ETH <= 1.12, and AXL F BK ETH XC <= 1.11 devices and Bosch Rexroth S20-ETH-BK and Rexroth S20-PN-BK+ (the S20-PN-BK+/S20-ETH-BK fieldbus couplers sold by Bosch Rexroth contain technology from Phoenix Contact). Incorrect handling of a request with non-standard symbols allows remote attackers to initiate a complete lock up of the bus coupler. Authentication of the request is not required.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Phoenixcontact | Axl F Bk Pn Firmware | <= 1.0.4 |
| Phoenixcontact | Axl F Bk Eth Firmware | <= 1.12 |
| Phoenixcontact | Axl F Bk Eth Xc Firmware | <= 1.11 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-16994?
How severe is CVE-2018-16994?
How do I fix CVE-2018-16994?
Are you affected by CVE-2018-16994?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST