NCC Group

Authenticated Arbitrary Process Termination allows potential System Disruption in ECOS

Authenticated Remote Code Execution allows Exploit in Scripts Feature

Authenticated Replay Attack contains Cryptographic Vulnerability

Unrestricted Binary allows File Enumeration in Underlying Operating System

Authenticated Arbitrary File Read allows Data Exposure in CLI Interface

Phoenix Contact: update feature from CHARX controller can be used to reset a low privilege user password

A command injection vulnerability exists in local RACADM. A malicious authenticated user could gain control of the underlying operating system.