Stack-Based Buffer Overflow in CLI Login Username Handling over CLI
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · None · Low
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA.
Summary
A stack-based buffer overflow in the device's Telnet/SSH CLI login routine occurs when a unauthenticated attacker send an oversized or unexpected username input. An overflow condition crashes the thread handling the login attempt, forcing the session to close. Because other CLI sessions remain unaffected, the impact is limited to a low‑severity availability disruption.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Phoenix Contact | FL SWITCH 2005 | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2008 | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2016 | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2105 | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2108 | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2116 | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2204-2TC-2SFX | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2205 | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2206-2FX | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2206-2FX SM | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2206-2FX SM ST | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2206-2FX ST | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2206-2SFX | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2206-2SFX PN | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2206C-2FX | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2207-FX | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2207-FX SM | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2208 | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2208 PN | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2208C | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2212-2TC-2SFX | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2214-2FX | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2214-2FX SM | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2214-2SFX | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2214-2SFX PN | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2216 | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2216 PN | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2304-2GC-2SFP | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2306-2SFP | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2306-2SFP PN | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2308 | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2308 PN | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2312-2GC-2SFP | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2314-2SFP | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2314-2SFP PN | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2316 | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2316 PN | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2404-2TC-2SFX | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2406-2SFX | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2406-2SFX PN | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2408 | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2408 PN | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2412-2TC-2SFX | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2414-2SFX | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2414-2SFX PN | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2416 | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2416 PN | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2504-2GC-2SFP | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2506-2SFP | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2506-2SFP PN | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2508 | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2508 PN | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2512-2GC-2SFP | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2514-2SFP | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2514-2SFP PN | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2516 | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2516 PN | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2608 | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2608 PN | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2708 | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2708 PN | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2303-8SP1 | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL NAT 2008 | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL NAT 2208 | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL NAT 2304-2GC-2SFP | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2008F | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2316/K1 | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2506-2SFP/K1 | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 2508/K1 | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH TSN 2316 | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH TSN 2312-2GC-2SFP | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH TSN 2314-2SFP | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 5924-4GC | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 5916-8GC-4SFP+ | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 5924SFP-4GC | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 5924-4SFP+ | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
| Phoenix Contact | FL SWITCH 5916SFP-8GC-4SFP+ | 0.0.0 to before 3.53 | 3.53 | Patch available | CNA |
- FL SWITCH 2005 VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2008 VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2016 VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2105 VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2108 VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2116 VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2204-2TC-2SFX VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2205 VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2206-2FX VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2206-2FX SM VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2206-2FX SM ST VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2206-2FX ST VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2206-2SFX VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2206-2SFX PN VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2206C-2FX VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2207-FX VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2207-FX SM VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2208 VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2208 PN VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2208C VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2212-2TC-2SFX VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2214-2FX VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2214-2FX SM VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2214-2SFX VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2214-2SFX PN VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2216 VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2216 PN VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2304-2GC-2SFP VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2306-2SFP VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2306-2SFP PN VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2308 VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2308 PN VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2312-2GC-2SFP VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2314-2SFP VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2314-2SFP PN VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2316 VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2316 PN VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2404-2TC-2SFX VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2406-2SFX VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2406-2SFX PN VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2408 VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2408 PN VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2412-2TC-2SFX VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2414-2SFX VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2414-2SFX PN VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2416 VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2416 PN VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2504-2GC-2SFP VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2506-2SFP VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2506-2SFP PN VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2508 VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2508 PN VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2512-2GC-2SFP VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2514-2SFP VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2514-2SFP PN VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2516 VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2516 PN VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2608 VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2608 PN VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2708 VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2708 PN VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2303-8SP1 VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL NAT 2008 VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL NAT 2208 VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL NAT 2304-2GC-2SFP VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2008F VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2316/K1 VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2506-2SFP/K1 VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 2508/K1 VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH TSN 2316 VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH TSN 2312-2GC-2SFP VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH TSN 2314-2SFP VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 5924-4GC VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 5916-8GC-4SFP+ VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 5924SFP-4GC VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 5924-4SFP+ VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
- FL SWITCH 5916SFP-8GC-4SFP+ VendorPhoenix Contact Affected 0.0.0 to before 3.53 Fixed in 3.53 Patch available CNA
Remediation
- Fix · CNA FL SWITCH 2005 (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2008 (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2016 (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2105 (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2108 (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2116 (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2204-2TC-2SFX (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2205 (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2206-2FX (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2206-2FX SM (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2206-2FX SM ST (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2206-2FX ST (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2206-2SFX (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2206-2SFX PN (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2206C-2FX (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2207-FX (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2207-FX SM (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2208 (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2208 PN (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2208C (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2212-2TC-2SFX (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2214-2FX (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2214-2FX SM (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2214-2SFX (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2214-2SFX PN (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2216 (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2216 PN (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2304-2GC-2SFP (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2306-2SFP (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2306-2SFP PN (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2308 (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2308 PN (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2312-2GC-2SFP (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2314-2SFP (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2314-2SFP PN (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2316 (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2316 PN (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2404-2TC-2SFX (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2406-2SFX (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2406-2SFX PN (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2408 (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2408 PN (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2412-2TC-2SFX (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2414-2SFX (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2414-2SFX PN (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2416 (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2416 PN (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2504-2GC-2SFP (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2506-2SFP (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2506-2SFP PN (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2508 (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2508 PN (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2512-2GC-2SFP (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2514-2SFP (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2514-2SFP PN (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2516 (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2516 PN (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2608 (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2608 PN (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2708 (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2708 PN (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2303-8SP1 (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL NAT 2008 (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL NAT 2208 (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL NAT 2304-2GC-2SFP (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2008F (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2316/K1 (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2506-2SFP/K1 (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 2508/K1 (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH TSN 2316 (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH TSN 2312-2GC-2SFP (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH TSN 2314-2SFP (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 5924-4GC (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 5916-8GC-4SFP+ (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 5924SFP-4GC (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 5924-4SFP+ (Phoenix Contact) Fixed in 3.53
- Fix · CNA FL SWITCH 5916SFP-8GC-4SFP+ (Phoenix Contact) Fixed in 3.53
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
Phoenix Contact FL NAT 2008, FL NAT 2208 and 75 more products 3.53
8 records Highest priority Priority LOW 8 LOW
Other records, highest priority first
- TI-2026-17899 Command Injection Vulnerability in Root CA Certificate Transfer WorkflowPriority LOW 36
- TI-2026-17904 Stored Cross‑Site Scripting in Link Aggregation Name HandlingPriority LOW 31
- TI-2026-17905 Cross‑Site Request Forgery in Link Aggregation ConfigurationPriority LOW 30
Timeline
- 2026-10-02 Threatist record created from CVE-2026-22321
- 2026-10-03 Alias added: GHSA-j66g-mfcw-hrf3
References
More Phoenix Contact vulnerabilities
- TI-2014-07463 Phoenix Contact Software ProConOs and MultiProg Missing Authentication for Critical Function CVSS 2.0CRITICAL 10.0
- TI-2024-17093 PHOENIX CONTACT: Remote code execution in CHARX Series CVSS 3.1CRITICAL 9.8
- TI-2022-13692 Insufficient Verification of Data Vulnerability in PHOENIX CONTACT classic line industrial controllers CVSS 3.1CRITICAL 9.8
- TI-2026-21959 Remote code execution via uploading a malicious IODD file CVSS 3.1CRITICAL 9.8
- TI-2026-21940 Authentication Bypass in _account_log CVSS 3.1CRITICAL 9.8
- TI-2023-03334 PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels CVSS 3.1CRITICAL 10.0
Sources
- CVE-2026-22321 · CVE Program
- CVE-2026-22321 · NVD
- FIRST EPSS
- GHSA-j66g-mfcw-hrf3 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences