Skip to content
OpenAdvisories
High ICSA-19-024-02 6 CVEs

PHOENIX CONTACT FL SWITCH

Published Jan 24, 2019 · Updated Jan 24, 2019

Vendor: PHOENIX CONTACT, Innominate Security Technologies Product: FL SWITCH 3xxx 4xxx and 48xx

Summary

Successful exploitation of these vulnerabilities may allow attackers to have user privileges, gain access to the switch, read user credentials, deny access to the switch, or perform man-in-the-middle attacks.

Vulnerabilities 6

  • High 8.8
    CVE-2018-13993

    The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 is prone to CSRF.

  • High 8.6
    CVE-2018-13990

    The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions prior to 1.35 is vulnerable to brute-force attacks, be…

  • High 8.2
    CVE-2018-13992

    The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 allows for plaintext transmission (HTTP) o…

  • High 7.5
    CVE-2018-13994

    The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 is vulnerable to a denial-of-service attac…

  • Medium 5.3
    CVE-2018-13991

    The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 leaks private information in firmware imag…

  • Unscored —
    CVE-2017-3735 EPSS 21%

    While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This woul…

    OpenSSL Software Foundation OpenSSL openssl openssl Debian Ubuntu Alpine

Revision history

  1. #1

    ICSA-19-024-02 PHOENIX CONTACT FL SWITCH

References