CVE-2014-9195 – Phoenix Contact ILC 150 ETH PLC - Remote Control Script

https://notcve.org/view.php?id=CVE-2014-9195

17 Jan 2015 — Phoenix Contact ProConOs and MultiProg do not require authentication, which allows remote attackers to execute arbitrary commands via protocol-compliant traffic. Phoenix Contact ProConOs y MultiProg no requieren autenticación, lo que permite a atacantes remotos ejecutar comandos arbitrarios a través de trafico conforme con el protocolo. PhoenixContact Programmable Logic Controllers are built upon a variant of ProConOS. Communicating using a proprietary protocol over ports TCP/1962 and TCP/41100 or TCP/20547... • https://packetstorm.news/files/id/180781 • CWE-255: Credentials Management Errors •