PT-2020-9957

Name of the Vulnerable Software and Affected Versions: PHOENIX CONTACT FL NAT 2208 devices versions prior to V2.90 PHOENIX CONTACT FL NAT 2304-2GC-2SFP devices versions prior to V2.90 Description: The issue is related to improper access control when using MAC-based port security. Recommendations:...

CVE-2019-18352: Undefined Security Weakness

Improper access control exists on PHOENIX CONTACT FL NAT 2208 devices before V2.90 and FL NAT 2304-2GC-2SFP devices before V2.90 when using MAC-based port security...

Session fixation

An issue was discovered on PHOENIX CONTACT FL NAT SMCS 8TX, FL NAT SMN 8TX, FL NAT SMN 8TX-M, and FL NAT SMN 8TX-M-DMG devices. There is unauthorized access to the WEB-UI by attackers arriving from the same source IP address as an authenticated user, because this IP address is used as a session...

PT-2019-19836

Name of the Vulnerable Software and Affected Versions PHOENIX CONTACT FL NAT SMCS 8TX affected versions not specified PHOENIX CONTACT FL NAT SMN 8TX affected versions not specified PHOENIX CONTACT FL NAT SMN 8TX-M affected versions not specified PHOENIX CONTACT FL NAT SMN 8TX-M-DMG affected...

CVE-2019-9744: Session Fixation

An issue was discovered on PHOENIX CONTACT FL NAT SMCS 8TX, FL NAT SMN 8TX, FL NAT SMN 8TX-M, and FL NAT SMN 8TX-M-DMG devices. There is unauthorized access to the WEB-UI by attackers arriving from the same source IP address as an authenticated user, because this IP address is used as a session...