Phoenix Contact: FL SWITCH 3xxx/4xxx/48xx series through 1.33 has a Stack-based Buffer Overflow
An attacker may insert a carefully crafted cookie into a GET menu_pxc.cgi or GET index.cgi request to cause a buffer overflow that can initiate a Denial of Service attack and execute arbitrary code.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-10728US | high8.1 | — | ||
All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to buffer overflows (a different vulnerability than CVE-2018-10731). | ||||
references
External citations — patches, advisories, analysis.
remediations (1)
- Fixed
Customers using Phoenix Contact managed FL SWITCH devices with affected firmware versions are recommended to update the firmware to version 1.34 or higher which fixes this vulnerability. The updated firmware may be downloaded from the managed switch product page on the Phoenix Contact website: | Article No. | Model | Updated Firmware | |-------------|---------------------------------------|-------------------------------------------------------------------------------------------------------------| | 2891030 | FL SWITCH 3005 | [Download Firmware](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3005-2891030?type=firmware_update) | | 2891032 | FL SWITCH 3005T | [Download Firmware](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3005t-2891032?type=firmware_update) | | 2891033 | FL SWITCH 3004T-FX | [Download Firmware](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3004t-fx-2891033?type=firmware_update) | | 2891034 | FL SWITCH 3004T-FX ST | [Download Firmware](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3004t-fx-st-2891034?type=firmware_update) | | 2891031 | FL SWITCH 3008 | [Download Firmware](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3008-2891031?type=firmware_update) | | 2891035 | FL SWITCH 3008T | [Download Firmware](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3008t-2891035?type=firmware_update) | | 2891036 | FL SWITCH 3006T-2FX | [Download Firmware](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3006t-2fx-2891036?type=firmware_update) | | 2891037 | FL SWITCH 3006T-2FX ST | [Download Firmware](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3006t-2fx-st-2891037?type=firmware_update) | | 2891067 | FL SWITCH 3012E-2SFX | [Download Firmware](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3012e-2sfx-2891067?type=firmware_update) | | 2891066 | FL SWITCH 3016E | [Download Firmware](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3016e-2891066?type=firmware_update) | | 2891058 | FL SWITCH 3016 | [Download Firmware](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3016-2891058?type=firmware_update) | | 2891059 | FL SWITCH 3016T | [Download Firmware](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3016t-2891059?type=firmware_update) | | 2891060 | FL SWITCH 3006T-2FX SM | [Download Firmware](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3006t-2fx-sm-2891060?type=firmware_update) | | 2891062 | FL SWITCH 4008T-2SFP | [Download Firmware](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4008t-2sfp-2891062?type=firmware_update) | | 2891061 | FL SWITCH 4008T-2GT-4FX SM | [Download Firmware](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4008t-2gt-4fx-sm-2891061?type=firmware_update) | | 2891160 | FL SWITCH 4008T-2GT-3FX SM | [Download Firmware](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4008t-2gt-3fx-sm-2891160?type=firmware_update) | | 2891073 | FL SWITCH 4808E-16FX LC-4GC | [Download Firmware](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4808e-16fx-lc-4gc-2891073?type=firmware_update) | | 2891080 | FL SWITCH 4808E-16FX SM-4GC | [Download Firmware](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4808e-16fx-sm-4gc-2891080?type=firmware_update) | | 2891086 | FL SWITCH 4808E-16FX SM ST-4GC | [Download Firmware](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4808e-16fx-sm-st-4gc-2891086?type=firmware_update) | | 2891085 | FL SWITCH 4808E-16FX ST-4GC | [Download Firmware](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4808e-16fx-st-4gc-2891085?type=firmware_update) | | 2891079 | FL SWITCH 4808E-16FX-4GC | [Download Firmware](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4808e-16fx-4gc-2891079?type=firmware_update) | | 2891074 | FL SWITCH 4808E-16FX SM LC-4GC | [Download Firmware](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4808e-16fx-sm-lc-4gc-2891074?type=firmware_update) | | 2891063 | FL SWITCH 4012T 2GT 2FX | [Download Firmware](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4012t-2gt-2fx-2891063?type=firmware_update) | | 2891161 | FL SWITCH 4012T-2GT-2FX ST | [Download Firmware](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4012t-2gt-2fx-st-2891161?type=firmware_update) | | 2891072 | FL SWITCH 4824E-4GC | [Download Firmware](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4824e-4gc-2891072?type=firmware_update) | | 2891102 | FL SWITCH 4800E-24FX-4GC | [Download Firmware](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4800e-24fx-4gc-2891102?type=firmware_update) | | 2891104 | FL SWITCH 4800E-24FX SM-4GC | [Download Firmware](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4800e-24fx-sm-4gc-2891104?type=firmware_update) | | 2891120 | FL SWITCH 3012E-2FX | [Download Firmware](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3012e-2fx-2891120?type=firmware_update) | | 2891119 | FL SWITCH 3012E-2FX SM | [Download Firmware](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3012e-2fx-sm-2891119?type=firmware_update) | | 2891162 | FL SWITCH 4000T-8POE-2SFP-R | please contact your local customer service |
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan