Stack-Based Buffer Overflow in File Install Parameter Handling
Key facts
- Attack vector
- Network
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-121 and the CVSS impact.
Summary
A stack-based buffer overflow in the device's file installation workflow allows a high-privileged attacker to send oversized POST parameters that overflow a fixed-size stack buffer within an internal process, resulting in a DoS attack.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Phoenix Contact | FL SWITCH 2005 | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2008 | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2016 | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2105 | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2108 | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2116 | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2204-2TC-2SFX | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2205 | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2206-2FX | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2206-2FX SM | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2206-2FX SM ST | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2206-2FX ST | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2206-2SFX | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2206-2SFX PN | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2206C-2FX | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2207-FX | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2207-FX SM | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2208 | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2208 PN | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2208C | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2212-2TC-2SFX | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2214-2FX | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2214-2FX SM | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2214-2SFX | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2214-2SFX PN | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2216 | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2216 PN | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2304-2GC-2SFP | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2306-2SFP | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2306-2SFP PN | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2308 | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2308 PN | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2312-2GC-2SFP | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2314-2SFP | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2314-2SFP PN | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2316 | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2316 PN | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2404-2TC-2SFX | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2406-2SFX | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2406-2SFX PN | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2408 | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2408 PN | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2412-2TC-2SFX | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2414-2SFX | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2414-2SFX PN | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2416 | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2416 PN | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2504-2GC-2SFP | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2506-2SFP | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2506-2SFP PN | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2508 | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2508 PN | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2512-2GC-2SFP | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2514-2SFP | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2514-2SFP PN | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2516 | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2516 PN | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2608 | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2608 PN | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2708 | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2708 PN | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2303-8SP1 | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL NAT 2008 | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL NAT 2208 | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL NAT 2304-2GC-2SFP | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2008F | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2316/K1 | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2506-2SFP/K1 | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2508/K1 | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH TSN 2316 | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH TSN 2312-2GC-2SFP | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH TSN 2314-2SFP | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 5924-4GC | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 5916-8GC-4SFP+ | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 5924SFP-4GC | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 5924-4SFP+ | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 5916SFP-8GC-4SFP+ | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
- FL SWITCH 2005 VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2008 VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2016 VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2105 VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2108 VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2116 VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2204-2TC-2SFX VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2205 VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2206-2FX VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2206-2FX SM VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2206-2FX SM ST VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2206-2FX ST VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2206-2SFX VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2206-2SFX PN VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2206C-2FX VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2207-FX VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2207-FX SM VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2208 VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2208 PN VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2208C VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2212-2TC-2SFX VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2214-2FX VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2214-2FX SM VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2214-2SFX VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2214-2SFX PN VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2216 VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2216 PN VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2304-2GC-2SFP VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2306-2SFP VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2306-2SFP PN VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2308 VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2308 PN VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2312-2GC-2SFP VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2314-2SFP VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2314-2SFP PN VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2316 VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2316 PN VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2404-2TC-2SFX VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2406-2SFX VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2406-2SFX PN VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2408 VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2408 PN VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2412-2TC-2SFX VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2414-2SFX VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2414-2SFX PN VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2416 VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2416 PN VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2504-2GC-2SFP VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2506-2SFP VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2506-2SFP PN VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2508 VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2508 PN VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2512-2GC-2SFP VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2514-2SFP VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2514-2SFP PN VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2516 VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2516 PN VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2608 VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2608 PN VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2708 VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2708 PN VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2303-8SP1 VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL NAT 2008 VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL NAT 2208 VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL NAT 2304-2GC-2SFP VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2008F VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2316/K1 VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2506-2SFP/K1 VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2508/K1 VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH TSN 2316 VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH TSN 2312-2GC-2SFP VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH TSN 2314-2SFP VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 5924-4GC VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 5916-8GC-4SFP+ VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 5924SFP-4GC VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 5924-4SFP+ VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 5916SFP-8GC-4SFP+ VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
Remediation
- Fix · CNA FL SWITCH 2005 (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2008 (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2016 (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2105 (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2108 (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2116 (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2204-2TC-2SFX (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2205 (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2206-2FX (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2206-2FX SM (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2206-2FX SM ST (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2206-2FX ST (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2206-2SFX (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2206-2SFX PN (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2206C-2FX (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2207-FX (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2207-FX SM (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2208 (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2208 PN (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2208C (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2212-2TC-2SFX (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2214-2FX (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2214-2FX SM (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2214-2SFX (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2214-2SFX PN (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2216 (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2216 PN (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2304-2GC-2SFP (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2306-2SFP (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2306-2SFP PN (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2308 (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2308 PN (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2312-2GC-2SFP (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2314-2SFP (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2314-2SFP PN (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2316 (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2316 PN (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2404-2TC-2SFX (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2406-2SFX (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2406-2SFX PN (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2408 (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2408 PN (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2412-2TC-2SFX (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2414-2SFX (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2414-2SFX PN (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2416 (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2416 PN (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2504-2GC-2SFP (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2506-2SFP (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2506-2SFP PN (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2508 (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2508 PN (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2512-2GC-2SFP (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2514-2SFP (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2514-2SFP PN (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2516 (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2516 PN (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2608 (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2608 PN (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2708 (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2708 PN (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2303-8SP1 (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL NAT 2008 (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL NAT 2208 (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL NAT 2304-2GC-2SFP (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2008F (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2316/K1 (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2506-2SFP/K1 (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2508/K1 (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH TSN 2316 (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH TSN 2312-2GC-2SFP (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH TSN 2314-2SFP (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 5924-4GC (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 5916-8GC-4SFP+ (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 5924SFP-4GC (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 5924-4SFP+ (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 5916SFP-8GC-4SFP+ (Phoenix Contact) Fixed in 3.53
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
Phoenix Contact FL NAT 2008, FL NAT 2208 and 75 more products 3.53
8 records Highest priority Priority LOW 8 LOW
Other records, highest priority first
- TI-2026-17899 Command Injection Vulnerability in Root CA Certificate Transfer WorkflowPriority LOW 36
- TI-2026-17904 Stored Cross‑Site Scripting in Link Aggregation Name HandlingPriority LOW 31
- TI-2026-17905 Cross‑Site Request Forgery in Link Aggregation ConfigurationPriority LOW 30
Timeline
- 2026-10-02 Threatist record created from CVE-2026-22319
- 2026-10-03 Alias added: GHSA-7hqw-92qf-g6mp
References
More Phoenix Contact vulnerabilities
- TI-2014-07463 Phoenix Contact Software ProConOs and MultiProg Missing Authentication for Critical Function CVSS 2.0CRITICAL 10.0
- TI-2024-17093 PHOENIX CONTACT: Remote code execution in CHARX Series CVSS 3.1CRITICAL 9.8
- TI-2022-13692 Insufficient Verification of Data Vulnerability in PHOENIX CONTACT classic line industrial controllers CVSS 3.1CRITICAL 9.8
- TI-2026-21959 Remote code execution via uploading a malicious IODD file CVSS 3.1CRITICAL 9.8
- TI-2026-21940 Authentication Bypass in _account_log CVSS 3.1CRITICAL 9.8
- TI-2023-03334 PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels CVSS 3.1CRITICAL 10.0
Sources
- CVE-2026-22319 · CVE Program
- CVE-2026-22319 · NVD
- FIRST EPSS
- GHSA-7hqw-92qf-g6mp · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences