Lucene search
CERTVDECVELIST:CVE-2022-22509HistoryFeb 02, 2022 - 12:26 p.m.
CVE-2022-22509 PHOENIX CONTACT: FL SWITCH 2xxx series incorrect privilege assignment
2022-02-0212:26:12
CERTVDE
www.cve.org
1
phoenix contact
fl switch
privilege assignment
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.7
Confidence
High
EPSS
0.001
Percentile
42.8%
In Phoenix Contact FL SWITCH Series 2xxx in version 3.00 an incorrect privilege assignment allows an low privileged user to enable full access to the device configuration.
References
Related
prion
prion
Design/Logic Flaw
2022-02-02 13:15:00
nvd
nvd
CVE-2022-22509
2022-02-02 13:15:08
cve
cve
CVE-2022-22509
2022-02-02 13:15:08
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.7
Confidence
High
EPSS
0.001
Percentile
42.8%
Related for CVELIST:CVE-2022-22509