TCP 1962
Synopsis
- TCP port 1962 is used by Phoenix Contact’s PC WORX/ProConOS programming service for communication between the PC WORX engineering software and Phoenix Contact PLCs (e.g., ILC and RFC series).
- It is used for tasks like downloading programs, diagnostics, and configuration to these controllers.
- Real-world scans (e.g., Shodan) often show “PC WORX” services exposed on TCP/1962, and multiple ICS-CERT advisories have specifically addressed vulnerabilities in this service on Phoenix Contact devices.
- This port has been associated with exploitation in the ICS space: researchers have demonstrated unauthenticated actions and denial-of-service conditions via the PC WORX protocol on 1962, and public proofs-of-concept exist targeting it.
- Outside of this industrial control use, there are no widely adopted mainstream protocols commonly using TCP/1962.
Observed activity
Last 30 days
Detailed chart