Skip to content
OpenAdvisories

Vendor

Phoenix Contact

193 known vulnerabilities.

Products

CHARX SEC-3150 51 CHARX SEC-3100 51 CHARX SEC-3050 51 CHARX SEC-3000 51 FL SWITCH 2005 22 FL SWITCH 2008 22 FL SWITCH 2016 22 FL SWITCH 2105 22 FL SWITCH 2108 22 FL SWITCH 2116 22 FL SWITCH 2204-2TC-2SFX 22 FL SWITCH 2205 22 FL SWITCH 2206-2FX 22 FL SWITCH 2206-2FX SM 22 FL SWITCH 2206-2FX SM ST 22 FL SWITCH 2206-2FX ST 22 FL SWITCH 2206-2SFX 22 FL SWITCH 2206-2SFX PN 22 FL SWITCH 2206C-2FX 22 FL SWITCH 2207-FX 22 FL SWITCH 2207-FX SM 22 FL SWITCH 2208 22 FL SWITCH 2208 PN 22 FL SWITCH 2208C 22 FL SWITCH 2212-2TC-2SFX 22 FL SWITCH 2214-2FX 22 FL SWITCH 2214-2FX SM 22 FL SWITCH 2214-2SFX 22 FL SWITCH 2214-2SFX PN 22 FL SWITCH 2216 22 FL SWITCH 2216 PN 22 FL SWITCH 2304-2GC-2SFP 22 FL SWITCH 2306-2SFP 22 FL SWITCH 2306-2SFP PN 22 FL SWITCH 2308 22 FL SWITCH 2308 PN 22 FL SWITCH 2312-2GC-2SFP 22 FL SWITCH 2314-2SFP 22 FL SWITCH 2314-2SFP PN 22 FL SWITCH 2316 22
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.8
    CVE-2023-37857

    PHOENIX CONTACT: Use of Hard-coded Credentials in WP 6xxx Web panels

    In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an authenticated, remote attacker with admin privileges is able to read hardcoded cryptographic keys allowing the attacker to create valid session cookies. These session-cookies created…

    Phoenix Contact WP 6101-WXPS WP 6156-WHPS WP 6215-WHPS ICS / OT
  • Low 3.3
    CVE-2021-34563

    In WirelessHART-Gateway versions 3.0.8 and 3.0.9 the HttpOnly flag is missing in a cookie which allows client-side javascript to modify it

    In PEPPERL+FUCHS WirelessHART-Gateway 3.0.8 and 3.0.9 the HttpOnly attribute is not set on a cookie. This allows the cookie's value to be read or set by client-side JavaScript.

    Phoenix Contact WHA-GW-F2D2-0-AS- Z2-ETH WHA-GW-F2D2-0-AS- Z2-ETH.EIP ICS / OT