PHOENIX CONTACT: Denial-of-Service vulnerabilty in Emalytics, ILC 2050 BI and ILC 2050 BI-L

A timeout during a TLS handshake can result in the connection failing to terminate. This can result in a Niagara thread hanging and requires a manual restart to correct.

Successful exploitation of this vulnerability could result in a denial-of-service condition.

Phoenix Contact recommends customers with affected products take the following steps to protect themselves:

• Review and validate the list of users who are authorized and who can authenticate to Emalytics.

• Allow only trained and trusted persons to have physical access to the system, including devices that have connection to the system though the Ethernet port.

Phoenix Contact recommends operating network-capable devices in closed networks or protected with a suitable firewall. For detailed information on our recommendations for measures to protect network-capable devices, please refer to our application note:

Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY 'Measures to protect network-capable devices with Ethernet connection against unauthorized access'