Design/Logic Flaw

2022-02-0213:15:00

PRIOn knowledge base

www.prio-n.com

8.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.9%

JSON

In Phoenix Contact FL SWITCH Series 2xxx in version 3.00 an incorrect privilege assignment allows an low privileged user to enable full access to the device configuration.

CPENameOperatorVersion
fl_switch_2005_firmwareeq3.00
fl_switch_2008_firmwareeq3.00
fl_switch_2008f_firmwareeq3.00
fl_switch_2016_firmwareeq3.00
fl_switch_2105_firmwareeq3.00
fl_switch_2108_firmwareeq3.00
fl_switch_2116_firmwareeq3.00
fl_switch_2204-2tc-2sfx_firmwareeq3.00
fl_switch_2205_firmwareeq3.00
fl_switch_2206-2fx_firmwareeq3.00

Name	Operator	Version
fl_switch_2005_firmware	eq	3.00
fl_switch_2008_firmware	eq	3.00
fl_switch_2008f_firmware	eq	3.00
fl_switch_2016_firmware	eq	3.00
fl_switch_2105_firmware	eq	3.00
fl_switch_2108_firmware	eq	3.00
fl_switch_2116_firmware	eq	3.00
fl_switch_2204-2tc-2sfx_firmware	eq	3.00
fl_switch_2205_firmware	eq	3.00
fl_switch_2206-2fx_firmware	eq	3.00

Rows per page:

1-10 of 651

References

cert.vde.com/en/advisories/VDE-2022-001/