Description
An Improper Authorization issue was discovered in PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, and 48xxx Series products running firmware Version 1.0 to 1.32. A remote unauthenticated attacker may be able to craft special HTTP requests allowing an attacker to bypass web-service authentication allowing the attacker to obtain administrative privileges on the device.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | PHOENIX CONTACT FL SWITCH | PHOENIX CONTACT FL SWITCH | — |
Advisories 2
- VDE-2017-006 PHOENIX CONTACT: FL SWITCH 3xxx/4xxx/48xx series web-service authentication bypass CERT@VDE · May 14, 2025
- ICSA-18-011-03 PHOENIX CONTACT FL SWITCH CISA ICS & IT advisories · Jan 11, 2018