Authorization

2018-01-1220:29:00

PRIOn knowledge base

www.prio-n.com

9.6 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.4%

JSON

An Improper Authorization issue was discovered in PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, and 48xxx Series products running firmware Version 1.0 to 1.32. A remote unauthenticated attacker may be able to craft special HTTP requests allowing an attacker to bypass web-service authentication allowing the attacker to obtain administrative privileges on the device.

CPENameOperatorVersion
fl_switch_3004t-fx_firmwarege1.0
fl_switch_3004t-fx_firmwarele1.32
fl_switch_3004t-fx_st_firmwarege1.0
fl_switch_3004t-fx_st_firmwarele1.32
fl_switch_3005_firmwarege1.0
fl_switch_3005_firmwarele1.32
fl_switch_3005t_firmwarege1.0
fl_switch_3005t_firmwarele1.32
fl_switch_3006t-2fx_firmwarege1.0
fl_switch_3006t-2fx_firmwarele1.32

Name	Operator	Version
fl_switch_3004t-fx_firmware	ge	1.0
fl_switch_3004t-fx_firmware	le	1.32
fl_switch_3004t-fx_st_firmware	ge	1.0
fl_switch_3004t-fx_st_firmware	le	1.32
fl_switch_3005_firmware	ge	1.0
fl_switch_3005_firmware	le	1.32
fl_switch_3005t_firmware	ge	1.0
fl_switch_3005t_firmware	le	1.32
fl_switch_3006t-2fx_firmware	ge	1.0
fl_switch_3006t-2fx_firmware	le	1.32