CVE-2017-16743

2018-01-1220:00:00

CWE-285

icscert

www.cve.org

9.7 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.4%

JSON

An Improper Authorization issue was discovered in PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, and 48xxx Series products running firmware Version 1.0 to 1.32. A remote unauthenticated attacker may be able to craft special HTTP requests allowing an attacker to bypass web-service authentication allowing the attacker to obtain administrative privileges on the device.

CNA Affected

[
  {
    "product": "PHOENIX CONTACT FL SWITCH",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "PHOENIX CONTACT FL SWITCH"
      }
    ]
  }
]