CVE:CVE-2019-10998
CNNVD:CNNVD-201906-092
Phoenix Contact PLCNext AXC F 2152是德国菲尼克斯电气（Phoenix Contact）公司的一款可编程逻辑控制器。
使用1.x版本固件的Phoenix Contact PLCNext AXC F 2152（2404267和1046568 (Starterkit)）中存在授权问题漏洞。该漏洞源于网络系统或产品中缺少身份验证措施或身份验证强度不足。
solution:Upgrade phoenixcontact axc_f_2152_firmware to a higher version than 2019.0_lts,and avoid the version (,2019.0_lts); Upgrade phoenixcontact axc_f_2152_starterkit_firmware to a higher version than 2019.0_lts,and avoid the version (,2019.0_lts)