CVE-2019-10998

An issue was discovered on Phoenix Contact AXC F 2152 (No.2404267) before 2019.0 LTS and AXC F 2152 STARTERKIT (No.1046568) before 2019.0 LTS devices. Unlimited physical access to the PLC may lead to a manipulation of SD cards data. SD card manipulation may lead to an authentication bypass opportunity.

• CWE-287

• https://dam-mdc.phoenixcontact.com/asset/156443151564/fa7be4d04c301f18c6cc0e0872193a42/Security_Advisory_AXC_F_2152_FW.pdfMitigation, Vendor Advisory
• https://dam-mdc.phoenixcontact.com/asset/156443151564/fa7be4d04c301f18c6cc0e0872193a42/Security_Advisory_AXC_F_2152_FW.pdfMitigation, Vendor Advisory

Published

Jun 18, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-10992Delta Electronics CNCSoft ScreenEditor, Versions 1.00.89 and…
• CVE-2019-10993In WebAccess/SCADA Versions 8.3.5 and prior, multiple untrus…9.8
• CVE-2019-10994Processing a specially crafted project file in LAquis SCADA …
• CVE-2019-10995ABB CP651 HMI products revision BSP UN30 v1.76 and prior imp…8.8
• CVE-2019-10996Red Lion Controls Crimson, version 3.0 and prior and version…7.8
• CVE-2019-10997An issue was discovered on Phoenix Contact AXC F 2152 (No.24…
• CVE-2019-10999The D-Link DCS series of Wi-Fi cameras contains a stack-base…
• CVE-2019-1100An information disclosure vulnerability exists when the Wind…
• CVE-2019-11000An issue was discovered in GitLab Enterprise Edition before …6.5
• CVE-2019-11001On Reolink RLC-410W, C1 Pro, C2 Pro, RLC-422W, and RLC-511W …7.2
• CVE-2019-11002In Materialize through 1.0.0, XSS is possible via the Toolti…
• CVE-2019-11003In Materialize through 1.0.0, XSS is possible via the Autoco…