title: Phoenix Contact: Undocumented FTP acces in certain AXL F BK and IL BK devices
description: In certain devices of the Phoenix Contact AXL F BK and IL BK product families an undocumented password protected FTP access to the root directory exists.
problem types: CWE-798 Use of Hard-coded Credentials
affected:
{
platforms: HW < 01
product: AXL F BK
vendor: Phoenix Contact
versions:
lessThan: 1.30, status: affected, version: AXL F PN TPS XC (1068857), versionType: custom
lessThan: 1.30, status: affected, version: AXL F EIP EF (2702782), versionType: custom
}
{
platforms: HW < 02
product: AXL F BK
vendor: Phoenix Contact
versions:
lessThan: 1.30, status: affected, version: AXL F PN TPS (2403869), versionType: custom
}
{
platforms: HW < 05
product: AXL F BK
vendor: Phoenix Contact
versions:
lessThan: 1.30, status: affected, version: AXL F EIP (2688394), versionType: custom
lessThan: 1.30, status: affected, version: AXL F ETH (2688459), versionType: custom
lessThan: 1.30, status: affected, version: AXL F ETH XC (2701949), versionType: custom
lessThan: 1.40, status: affected, version: AXL F S3 (2701686), versionType: custom
}
{
product: AXL F BK
vendor: Phoenix Contact
versions:
status: affected, version: AXL F PN (2701815) all revisions
status: affected, version: AXL F PN XC (2701222) all revisions
status: affected, version: AXL F ETH NET2 (2702177) all revisions
status: affected, version: AXL F SAS (2701457) all revisions
}
{
product: IL
vendor: Phoenix Contact
versions:
status: affected, version: IL PN BK-PAC (2403696) all revisions
status: affected, version: IL PN BK DI8 DO4 2TX-PAC (2703994) all revisions
status: affected, version: IL PN BK DI8 DO4 2SCRJ-PAC (2878379) all revisions
status: affected, version: IL ETH BK DI8 DO4 2TX-XC-PAC (2701388) all revisions
status: affected, version: IL ETH BK DI8 DO4 2TX-PAC (2703981) all revisions
status: affected, version: IL EIP BK DI8 DO4 2TX-PAC (2897758) all revisions
status: affected, version: IL S3 BK DI8 DO4 2TX-PAC (2692380) all revisions
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 7.3
baseSeverity: HIGH
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
version: 3.1
]
solutions: Please refer to the advisory (https://cert.vde.com/en-us/advisories/vde-2021-021) for a list of updated firmware versions for remediation.