CVE-2019-9744

Name: CVE-2019-9744
Creator: NVD / NIST
Published: 2019-03-26T20:29:00.837+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 1.64%

Last modified Jun 17, 2026

CVE-2019-9744 is a vulnerability of currently unknown severity. An issue was discovered on PHOENIX CONTACT FL NAT SMCS 8TX, FL NAT SMN 8TX, FL NAT SMN 8TX-M, and FL NAT SMN 8TX-M-DMG devices. There is unauthorized access to the WEB-UI by attackers arriving from the same source IP address as an authenticated user, because this IP address is used as a session identifier.. EPSS estimates a 1.64% chance of exploitation in the next 30 days.

Description

An issue was discovered on PHOENIX CONTACT FL NAT SMCS 8TX, FL NAT SMN 8TX, FL NAT SMN 8TX-M, and FL NAT SMN 8TX-M-DMG devices. There is unauthorized access to the WEB-UI by attackers arriving from the same source IP address as an authenticated user, because this IP address is used as a session identifier.

Metrics

EPSS Probability

1.64%

73.3th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-384

Affected Software

Vendor	Product	Versions
Phoenixcontact	Fl Nat Smn 8tx-M-Dmg Firmware	All versions
Phoenixcontact	Fl Nat Smn 8tx-M Firmware	All versions
Phoenixcontact	Fl Nat Smn 8tx Firmware	All versions
Phoenixcontact	Fl Nat Smcs 8tx Firmware	All versions

References

http://www.securityfocus.com/bid/108576
https://cert.vde.com/de-de/advisories/vde-2019-006Mitigation, Vendor Advisory
https://ics-cert.us-cert.gov/advisories/ICSA-19-155-02
http://www.securityfocus.com/bid/108576
https://cert.vde.com/de-de/advisories/vde-2019-006Mitigation, Vendor Advisory
https://ics-cert.us-cert.gov/advisories/ICSA-19-155-02

Timeline

Published: Mar 26, 2019
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2019-9744?

How severe is CVE-2019-9744?

Severity scoring for CVE-2019-9744 is pending analysis. The EPSS model estimates a 1.64% probability of exploitation in the next 30 days.

How do I fix CVE-2019-9744?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2019-9744?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST