Command injection

2018-05-1719:29:00

PRIOn knowledge base

www.prio-n.com

9.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.7%

JSON

All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to OS command injection.

CPENameOperatorVersion
fl_switch_3004t-fx_firmwarege1.0
fl_switch_3004t-fx_firmwarele1.33
fl_switch_3004t-fx_st_firmwarege1.0
fl_switch_3004t-fx_st_firmwarele1.33
fl_switch_3005_firmwaregt1.0
fl_switch_3005_firmwarele1.33
fl_switch_3005t_firmwarege1.0
fl_switch_3005t_firmwarele1.33
fl_switch_3006t-2fx_firmwarege1.0
fl_switch_3006t-2fx_firmwarele1.33

Name	Operator	Version
fl_switch_3004t-fx_firmware	ge	1.0
fl_switch_3004t-fx_firmware	le	1.33
fl_switch_3004t-fx_st_firmware	ge	1.0
fl_switch_3004t-fx_st_firmware	le	1.33
fl_switch_3005_firmware	gt	1.0
fl_switch_3005_firmware	le	1.33
fl_switch_3005t_firmware	ge	1.0
fl_switch_3005t_firmware	le	1.33
fl_switch_3006t-2fx_firmware	ge	1.0
fl_switch_3006t-2fx_firmware	le	1.33