ICSA-18-137-02

PHOENIX CONTACT FL SWITCH 3xxx/4xxx/48xx Series

view advisory published 2018-05-17

Successful exploitation of these vulnerabilities could allow for remote code execution and information disclosure.

describes (4)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2018-10731US	critical9.0	2.65% (86th)	—	2018-05-17
All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to buffer overflows when handling very large cookies (a different vul…
CVE-2018-10730US	critical9.1	4.50% (91st)	—	2018-05-17
All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to OS command injection.
CVE-2018-10729US	medium5.3	1.83% (79th)	—	2018-05-17
All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 allow reading the configuration file by an unauthenticated user.
CVE-2018-10728US	high8.1	2.18% (82nd)	—	2018-05-17
All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to buffer overflows (a different vulnerability than CVE-2018-10731).

External citations — patches, advisories, analysis.

MitigationAll FL SWITCH 3xxx 4xxx and 48xxx Series products running firmware
FL SWITCH 3005
http://www.phoenixcontact.net/qr/2891030/firmware_update
MitigationAll FL SWITCH 3xxx 4xxx and 48xxx Series products running firmware
FL SWITCH 3005
http://www.phoenixcontact.net/qr/2891030/firmware_update
MitigationAll FL SWITCH 3xxx 4xxx and 48xxx Series products running firmware
FL SWITCH 3005
http://www.phoenixcontact.net/qr/2891030/firmware_update
MitigationAll FL SWITCH 3xxx 4xxx and 48xxx Series products running firmware
FL SWITCH 3005
http://www.phoenixcontact.net/qr/2891030/firmware_update

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.