PHOENIX CONTACT FL SWITCH 3xxx/4xxx/48xx Series
Advisory ansehen veröffentlicht 2018-05-17
Successful exploitation of these vulnerabilities could allow for remote code execution and information disclosure.
01
beschreibt (4)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2018-10731US | critical9.0 | — | ||
All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to buffer overflows when handling very large cookies (a different vul… | ||||
| CVE-2018-10730US | critical9.1 | — | ||
All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to OS command injection. | ||||
| CVE-2018-10729US | medium5.3 | — | ||
All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 allow reading the configuration file by an unauthenticated user. | ||||
| CVE-2018-10728US | high8.1 | — | ||
All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to buffer overflows (a different vulnerability than CVE-2018-10731). | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-18-137-02 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (4)
- MitigationAll FL SWITCH 3xxx 4xxx and 48xxx Series products running firmware
FL SWITCH 3005
http://www.phoenixcontact.net/qr/2891030/firmware_update - MitigationAll FL SWITCH 3xxx 4xxx and 48xxx Series products running firmware
FL SWITCH 3005
http://www.phoenixcontact.net/qr/2891030/firmware_update - MitigationAll FL SWITCH 3xxx 4xxx and 48xxx Series products running firmware
FL SWITCH 3005
http://www.phoenixcontact.net/qr/2891030/firmware_update - MitigationAll FL SWITCH 3xxx 4xxx and 48xxx Series products running firmware
FL SWITCH 3005
http://www.phoenixcontact.net/qr/2891030/firmware_update
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan