What is the severity of CVE-2014-9195?

CVE-2014-9195 has a high severity rating due to the potential for remote command execution by unauthenticated attackers.

How do I fix CVE-2014-9195?

To mitigate CVE-2014-9195, ensure that network segmentation is applied and restrict access to the application from untrusted networks.

What systems are affected by CVE-2014-9195?

CVE-2014-9195 affects Phoenix Contact Multiprog version 5.0 and various ProConOs configurations.

Can CVE-2014-9195 be exploited remotely?

Yes, CVE-2014-9195 can be exploited remotely due to the lack of authentication in the affected software.

What kind of attacks can be performed using CVE-2014-9195?

Exploitation of CVE-2014-9195 can lead to arbitrary command execution, allowing attackers to gain control over the affected systems.

Vulnerability/
CVE-2014-9195

high

7.5

CWE

255

17/1/2015

6/8/2024

CVE-2014-9195

First published: Sat Jan 17 2015(Updated: )

Phoenix Contact ProConOs and MultiProg do not require authentication, which allows remote attackers to execute arbitrary commands via protocol-compliant traffic.

Credit: ics-cert@hq.dhs.gov

Affected Software	Affected Version	How to fix
Phoenix Contact MultiProg	=5.0
Phoenix Contact MultiProg	=5.0
Phoenix Contact MultiProg	=5.0
Phoenixcontact Proconos Eclr
Phoenixcontact Proconos Eclr
Phoenixcontact Proconos Eclr
Phoenixcontact Proconos Eclr

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2014-9195?
CVE-2014-9195 has a high severity rating due to the potential for remote command execution by unauthenticated attackers.
How do I fix CVE-2014-9195?
To mitigate CVE-2014-9195, ensure that network segmentation is applied and restrict access to the application from untrusted networks.
What systems are affected by CVE-2014-9195?
CVE-2014-9195 affects Phoenix Contact Multiprog version 5.0 and various ProConOs configurations.
Can CVE-2014-9195 be exploited remotely?
Yes, CVE-2014-9195 can be exploited remotely due to the lack of authentication in the affected software.
What kind of attacks can be performed using CVE-2014-9195?
Exploitation of CVE-2014-9195 can lead to arbitrary command execution, allowing attackers to gain control over the affected systems.

agent/references
agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/severity
agent/last-modified-date
agent/weakness
agent/author
agent/description
agent/first-publish-date
agent/event
agent/source
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
vendor/phoenixcontact-software
canonical/phoenix contact multiprog
version/phoenix contact multiprog/5.0
canonical/phoenixcontact proconos eclr

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.