Phoenixcontact

Records156All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical26CVSS 9.0–10.0

CVSS high94CVSS 7.0–8.9

Exploited now

Phoenixcontact records in CISA KEV

No Phoenixcontact vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Charx Sec-3000 Firmware 29 records MEDIUM Charx Sec-3050 Firmware 29 records MEDIUM Charx Sec-3100 Firmware 29 records MEDIUM Charx Sec-3150 Firmware 29 records MEDIUM Fl Mguard Rs4004 Tx/dtx Firmware 16 records MEDIUM Fl Mguard Rs4004 Tx/dtx Vpn Firmware 16 records MEDIUM Fl Mguard Centerport Vpn-1000 Firmware 15 records MEDIUM Fl Mguard Core Tx Firmware 15 records MEDIUM

Records

11 records in Fl Switch 3004t-fx Firmware · all components

TI-2017-12306 CVE-2017-16743 · GHSA-xp4q-qhv3-758q

Improper authorization in PHOENIX CONTACT FL SWITCH

MEDIUM 48

An Improper Authorization issue was discovered in PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, and 48xxx Series products running firmware Version 1.0 to 1.32.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03111 Published 2018-01-12 No fix listed CWE-285

TI-2018-10109 CVE-2018-13990 · GHSA-8769-f7h2-qvf4

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions prior to 1.35 is…

MEDIUM 47

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions prior to 1.35 is vulnerable to brute-force attacks, because of Improper Restriction of Excessive Authentication Attempts.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02314 Published 2019-05-06 No fix listed CWE-287

TI-2018-07589 CVE-2018-10730 · GHSA-v9j3-6w7p-3346

All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version…

MEDIUM 47

All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to OS command injection.

CVSS 3.0CRITICAL 9.1 Network High privileges No interaction EPSS 0.04501 Published 2018-05-17 No fix listed CWE-78

TI-2018-10111 CVE-2018-13992 · GHSA-m9g7-24wc-gw4q

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 allows for…

MEDIUM 44

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 allows for plaintext transmission (HTTP) of user credentials by default.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0111 Published 2019-05-07 No fix listed CWE-311

TI-2018-07590 CVE-2018-10731 · GHSA-fwh4-47pw-jmg5

All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version…

MEDIUM 44

All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to buffer overflows when handling very large cookies (a different vulnerability than CVE-2018-10728).

CVSS 3.0CRITICAL 9.0 Network No auth No interaction EPSS 0.02645 Published 2018-05-17 No fix listed CWE-119

TI-2018-10112 CVE-2018-13993 · GHSA-x8c5-5338-rgc5

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 is prone to CSRF.

MEDIUM 40

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 is prone to CSRF.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00856 Published 2019-05-07 No fix listed CWE-352

TI-2018-07587 CVE-2018-10728 · GHSA-rwm3-gq5c-p5rr

All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version…

LOW 39

All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to buffer overflows (a different vulnerability than CVE-2018-10731).

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.02176 Published 2018-05-17 No fix listed CWE-119

TI-2018-10113 CVE-2018-13994 · GHSA-9xc9-7qcm-99r9

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 is…

LOW 37

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 is vulnerable to a denial-of-service attack by making more than 120 connections.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02174 Published 2019-05-07 No fix listed CWE-400

TI-2018-07588 CVE-2018-10729 · GHSA-5rh6-9788-fh7g

All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version…

LOW 28

All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 allow reading the configuration file by an unauthenticated user.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01827 Published 2018-05-17 No fix listed CWE-200

TI-2018-10110 CVE-2018-13991 · GHSA-62xj-w7jf-v2q8

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 leaks…

LOW 27

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 leaks private information in firmware images.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.0164 Published 2019-05-07 No fix listed CWE-200

TI-2017-12305 CVE-2017-16741 · GHSA-6c6j-r563-746g

Information disclosure in PHOENIX CONTACT FL SWITCH

LOW 26

An Information Exposure issue was discovered in PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, and 48xxx Series products running firmware Version 1.0 to 1.32.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01215 Published 2018-01-12 No fix listed CWE-200

Open these records in search →

Critical	26
High	94
Medium	36
Low	0
No CVSS	0