CVE-2020-9435 : What You Need to Know

Phoenix Contact TC Router and TC Cloud Client devices are affected by a hardcoded certificate vulnerability that could lead to impersonation, man-in-the-middle, or passive decryption attacks.

Understanding CVE-2020-9435

What is CVE-2020-9435?

CVE-2020-9435 is a vulnerability found in Phoenix Contact TC Router and TC Cloud Client devices due to a hardcoded certificate used for web-based services.

The Impact of CVE-2020-9435

The vulnerability could allow attackers to impersonate, conduct man-in-the-middle attacks, or passively decrypt data if the default generic certificate is not replaced with a device-specific one during installation.

Technical Details of CVE-2020-9435

Vulnerability Description

Devices affected: TC Router 3002T-4G, TC Router 2002T-3G, TC Cloud Client 1002-4G, and more
Vulnerable versions: TC Router 3002T-4G through 2.05.3, TC Cloud Client 1002-4G through 2.03.17, and more

Affected Systems and Versions

Phoenix Contact TC Router 3002T-4G through 2.05.3
TC Router 2002T-3G through 2.05.3
TC Cloud Client 1002-4G through 2.03.17
TC Cloud Client 1002-TXTX through 1.03.17

Exploitation Mechanism

The vulnerability arises from a hardcoded certificate and key that are utilized by default for web-based services on the affected devices.

Mitigation and Prevention

Immediate Steps to Take

Replace the generic certificate with a device-specific one during device installation
Monitor network traffic for any signs of unauthorized access

Long-Term Security Practices

Regularly update device firmware to patch known vulnerabilities
Implement strong encryption protocols and secure certificate management practices

Patching and Updates

Apply vendor-supplied patches promptly to address the hardcoded certificate issue