PHOENIX CONTACT FL SWITCH
Successful exploitation of these vulnerabilities may allow attackers to have user privileges, gain access to the switch, read user credentials, deny access to the switch, or perform man-in-the-middle attacks.
beschreibt (6)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2018-13994US | high7.5 | — | ||
The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 is vulnerable to a denial-of-service attack by making more than 120 connections. | ||||
| CVE-2018-13993US | high8.8 | — | ||
The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 is prone to CSRF. | ||||
| CVE-2018-13992US | critical9.8OT erhöht | — | ||
The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 allows for plaintext transmission (HTTP) of user credentials by default. | ||||
| CVE-2018-13991US | medium5.3 | — | ||
The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 leaks private information in firmware images. | ||||
| CVE-2018-13990US | critical9.8 | — | ||
The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions prior to 1.35 is vulnerable to brute-force attacks, because of Improper Restriction of Excessive Authentication Att… | ||||
| CVE-2017-3735US | medium5.3 | — | ||
While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. Thi… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (6)
- MitigationFL SWITCH 3xxx 4xxx and 48xx
Phoenix Contact also recommends that users using the Phoenix Contact managed FL SWITCH devices enable HTTP security.
- MitigationFL SWITCH 3xxx 4xxx and 48xx
Phoenix Contact also recommends that users using the Phoenix Contact managed FL SWITCH devices enable HTTP security.
- MitigationFL SWITCH 3xxx 4xxx and 48xx
Phoenix Contact also recommends that users using the Phoenix Contact managed FL SWITCH devices enable HTTP security.
- MitigationFL SWITCH 3xxx 4xxx and 48xx
Phoenix Contact also recommends that users using the Phoenix Contact managed FL SWITCH devices enable HTTP security.
- MitigationFL SWITCH 3xxx 4xxx and 48xx
Phoenix Contact also recommends that users using the Phoenix Contact managed FL SWITCH devices enable HTTP security.
- MitigationFL SWITCH 3xxx 4xxx and 48xx
Phoenix Contact also recommends that users using the Phoenix Contact managed FL SWITCH devices enable HTTP security.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan