103 matches found
Design/Logic Flaw
The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions prior to 1.35 is vulnerable to brute-force attacks, because of Improper Restriction of Excessive Authentication Attempts...
CVE-2018-13990
The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions prior to 1.35 is vulnerable to brute-force attacks, because of Improper Restriction of Excessive Authentication Attempts...
CVE-2018-13990
The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions prior to 1.35 is vulnerable to brute-force attacks, because of Improper Restriction of Excessive Authentication Attempts...
CVE-2018-13990
The CVE-2018-13990 entry targets PHOENIX CONTACT FL SWITCH series (3xxx, 4xxx, 48xx) with versions prior to 1.35. The vulnerability arises from Improper Restriction of Excessive Authentication Attempts, enabling brute-force login attempts against the Web UI. Exploitation could allow an attacker t...
Phoenix Contact FL SWITCH Denial of Service Vulnerability
Phoenix Contact FL SWITCH is an industrial grade Ethernet switch from the Phoenix Contact group of companies in Germany. A denial of service vulnerability exists in Phoenix Contact FL SWITCH versions 3xxx prior to 1.35, 4xxx prior to 1.35, and 48xx prior to 1.35, which can be exploited to cause a...
Phoenix Contact FL SWITCH Cross-Site Request Forgery Vulnerability
Phoenix Contact FL SWITCH is an industrial grade Ethernet switch from the Phoenix Contact group of companies in Germany. A cross-site request forgery vulnerability exists in Phoenix Contact FL SWITCH versions prior to 3xxx 1.35, 4xxx 1.35, and 48xx 1.35, which can be exploited by a remote attacke...
PHOENIX CONTACT FL SWITCH
1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: PHOENIX CONTACT Equipment: FL SWITCH Vulnerabilities: Cross-site Request Forgery, Improper Restriction of Excessive Authentication Attempts, Cleartext Transmission of Sensitive Information, Resourc...
The vulnerability of the config_transfer.cgi and software_update.cgi components of FL SWITCH software for controlling switches allows a hacker to execute arbitrary commands.
The vulnerability of the configtransfer.cgi and softwareupdate.cgi components of the FL SWITCH software for controlling switches from Phoenix Contact is related to the absence of a mechanism to neutralize special elements in the input commands of the operating system. Exploiting this vulnerabilit...
The vulnerability of FL SWITCH microprogrammed software for controlled switches arises from operations that go beyond the buffer boundaries in memory. This allows attackers to access device operating system files and execute arbitrary code.
The vulnerability of the microprogrammed software for controlled switches from FL SWITCH from Phoenix Contact arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to the device’s operating...
PHOENIX CONTACT FL SWITCH 3xxx, 4xxx and 48xxx Series Stack Buffer Overflow Vulnerability
PHOENIX CONTACT FL SWITCH 3xxx, 4xxx and 48xxx Series are different series of switching devices from the Phoenix Contact Group. A stack buffer overflow vulnerability exists in the PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, and 48xxx Series products using firmware versions 1.0 through 1.32. A remote...
Phoenix Contact managed FL SWITCH Command Injection Vulnerability
Phoenix Contact is a German provider of industrial automation, connectivity and interface solutions for critical infrastructure applications in industries such as communications, critical manufacturing and information technology. A command injection vulnerability exists in the Phoenix Contact...
Phoenix Contact managed FL SWITCH Buffer Overflow Vulnerability
Phoenix Contact is a German provider of industrial automation, connectivity and interface solutions for critical infrastructure applications in industries such as communications, critical manufacturing and information technology. A buffer overflow vulnerability exists in Phoenix Contact managed F...
CVE-2018-10729
All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 allow reading the configuration file by an unauthenticated user...
CVE-2018-10731
All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to buffer overflows when handling very large cookies a different vulnerability than CVE-2018-10728...
CVE-2018-10731
All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to buffer overflows when handling very large cookies a different vulnerability than CVE-2018-10728...
CVE-2018-10730
All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to OS command injection...
Buffer overflow
All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to buffer overflows a different vulnerability than CVE-2018-10731...
CVE-2018-10728
All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to buffer overflows a different vulnerability than CVE-2018-10731...