CVE-2018-13992

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 allows for plaintext transmission HTTP of user credentials by default...

CVE-2018-13992

CVE-2018-13992 affects Phoenix Contact FL SWITCH devices (3xxx, 4xxx, 48xx) with firmware versions prior to 1.35. The issue is cleartext transmission of user credentials over HTTP in the Web UI by default, enabling potential credential exposure via the Web UI. The Root Cause is the use of HTTP (n...