PHOENIX CONTACT FL SWITCH
Successful exploitation of these vulnerabilities may allow attackers to have user privileges, gain access to the switch, read user credentials, deny access to the switch, or perform man-in-the-middle attacks.
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-13994US | high7.5 | — | ||
The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 is vulnerable to a denial-of-service attack by making more than 120 connections. | ||||
| CVE-2018-13993US | high8.8 | — | ||
The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 is prone to CSRF. | ||||
| CVE-2018-13992US | critical9.8OT elevated | — | ||
The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 allows for plaintext transmission (HTTP) of user credentials by default. | ||||
| CVE-2018-13991US | medium5.3 | — | ||
The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 leaks private information in firmware images. | ||||
| CVE-2018-13990US | critical9.8 | — | ||
The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions prior to 1.35 is vulnerable to brute-force attacks, because of Improper Restriction of Excessive Authentication Att… | ||||
| CVE-2017-3735US | medium5.3 | — | ||
While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. Thi… | ||||
references
External citations — patches, advisories, analysis.
remediations (6)
- MitigationFL SWITCH 3xxx 4xxx and 48xx
Phoenix Contact also recommends that users using the Phoenix Contact managed FL SWITCH devices enable HTTP security.
- MitigationFL SWITCH 3xxx 4xxx and 48xx
Phoenix Contact also recommends that users using the Phoenix Contact managed FL SWITCH devices enable HTTP security.
- MitigationFL SWITCH 3xxx 4xxx and 48xx
Phoenix Contact also recommends that users using the Phoenix Contact managed FL SWITCH devices enable HTTP security.
- MitigationFL SWITCH 3xxx 4xxx and 48xx
Phoenix Contact also recommends that users using the Phoenix Contact managed FL SWITCH devices enable HTTP security.
- MitigationFL SWITCH 3xxx 4xxx and 48xx
Phoenix Contact also recommends that users using the Phoenix Contact managed FL SWITCH devices enable HTTP security.
- MitigationFL SWITCH 3xxx 4xxx and 48xx
Phoenix Contact also recommends that users using the Phoenix Contact managed FL SWITCH devices enable HTTP security.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan