Phoenix Contact managed FL SWITCH Command Injection Vulnerability

Phoenix Contact is a German provider of industrial automation, connectivity and interface solutions for critical infrastructure applications in industries such as communications, critical manufacturing and information technology. A command injection vulnerability exists in the Phoenix Contact...

PHOENIX CONTACT FL SWITCH 3xxx, 4xxx and 48xxx Series Stack Buffer Overflow Vulnerability

PHOENIX CONTACT FL SWITCH 3xxx, 4xxx and 48xxx Series are different series of switching devices from the Phoenix Contact Group. A stack buffer overflow vulnerability exists in the PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, and 48xxx Series products using firmware versions 1.0 through 1.32. A remote...

Phoenix Contact managed FL SWITCH Buffer Overflow Vulnerability

Phoenix Contact is a German provider of industrial automation, connectivity and interface solutions for critical infrastructure applications in industries such as communications, critical manufacturing and information technology. A buffer overflow vulnerability exists in Phoenix Contact managed F...

Buffer overflow

All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to buffer overflows when handling very large cookies a different vulnerability than CVE-2018-10728...

CVE-2018-10728

All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to buffer overflows a different vulnerability than CVE-2018-10731...

Buffer overflow

All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to buffer overflows a different vulnerability than CVE-2018-10731...

Command injection

All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to OS command injection...

CVE-2018-10729

All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 allow reading the configuration file by an unauthenticated user...

CVE-2018-10730

All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to OS command injection...

Authorization

All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 allow reading the configuration file by an unauthenticated user...

CVE-2018-10731

All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to buffer overflows when handling very large cookies a different vulnerability than CVE-2018-10728...

CVE-2018-10728

All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to buffer overflows a different vulnerability than CVE-2018-10731...

CVE-2018-10731

All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to buffer overflows when handling very large cookies a different vulnerability than CVE-2018-10728...

CVE-2018-10731

All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to buffer overflows when handling very large cookies a different vulnerability than CVE-2018-10728...

CVE-2018-10728

All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to buffer overflows a different vulnerability than CVE-2018-10731...

CVE-2018-10728

CVE-2018-10728 affects Phoenix Contact FL SWITCH 3xxx/4xxx/48xxx series (firmware 1.0–1.33 per NVD; 1.0–1.32 per CNVD) with a stack buffer overflow in handling cookies. CNVD entries describe a remote exploit via crafted GET cookies that could overflow a buffer, potentially allowing unauthorized a...

CVE-2018-10729

Phoenix Contact FL SWITCH series (3xxx/4xxx/48xx) running firmware 1.0–1.33 are affected by an information-disclosure vulnerability that allows an unauthenticated attacker to read the device configuration file. The issue is cataloged as CVE-2018-10729; the related ICS/CERT advisory notes informat...

CVE-2018-10730

CVE-2018-10730 affects Phoenix Contact FL SWITCH 3xxx/4xxx/48xx series running firmware 1.0–1.33. The vulnerability is a command injection in the OS shell triggered when transferring configuration files or upgrading firmware. Risk is high (CVSS v3 base 9.1) with remote exploitation possible accor...

CVE-2018-10731

CVE-2018-10731 affects Phoenix Contact FL SWITCH 3xxx/4xxx/48xxx series with firmware 1.0–1.33. It describes a stack buffer overflow when handling very large cookies, potentially enabling remote code execution or denial of service as indicated by CNVD/NVD records. The connected documents provide ...

CVE-2018-10729: Exposure of Sensitive Information to an Unauthorized Actor

All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 allow reading the configuration file by an unauthenticated user...