CVE-2018-13993

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 is prone to CSRF...

CVE-2018-13993

The CVE-2018-13993 entry describes a Cross-Site Request Forgery (CSRF) vulnerability in the WebUI of Phoenix Contact FL SWITCH family (3xxx, 4xxx, 48xx) versions before 1.35. The underlying issue allows a remote attacker to trick an authenticated user’s browser into issuing unwanted commands, wit...

CVE-2018-13992

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 allows for plaintext transmission HTTP of user credentials by default...

CVE-2018-13992

CVE-2018-13992 affects Phoenix Contact FL SWITCH devices (3xxx, 4xxx, 48xx) with firmware versions prior to 1.35. The issue is cleartext transmission of user credentials over HTTP in the Web UI by default, enabling potential credential exposure via the Web UI. The Root Cause is the use of HTTP (n...

CVE-2018-13991

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 leaks private information in firmware images...

CVE-2018-13991

CVE-2018-13991 affects PHOENIX CONTACT FL SWITCH 3xxx/4xxx/48xx, firmware versions 1.0–1.34. Root cause: insecure storage of sensitive information in the switch Web UI, enabling leakage of private information (e.g., private keys) from firmware images. Related advisories note multiple vulnerabilit...

CVE-2018-13994: Uncontrolled Resource Consumption

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 is vulnerable to a denial-of-service attack by making more than 120 connections...

CVE-2018-13991: Exposure of Sensitive Information to an Unauthorized Actor

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 leaks private information in firmware images...

PT-2019-9015

Name of the Vulnerable Software and Affected Versions PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 through 1.34 Description The WebUI of the affected devices allows for plaintext transmission of user credentials by default, which can be done over HTTP. Recommendations For versions 1.0...

PT-2019-9014

Name of the Vulnerable Software and Affected Versions PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 through 1.34 Description The WebUI of the affected devices leaks private information in firmware images. Recommendations For versions 1.0 through 1.34, consider restricting access to the...

PT-2019-9016

Name of the Vulnerable Software and Affected Versions PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 through 1.34 Description The WebUI of the affected devices is prone to CSRF, which could potentially allow unauthorized actions to be performed. Recommendations For versions 1.0 through...

CVE-2018-13992: Missing Encryption of Sensitive Data

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 allows for plaintext transmission HTTP of user credentials by default...

PT-2019-9017

Name of the Vulnerable Software and Affected Versions PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 through 1.34 Description The WebUI of the affected device is susceptible to a denial-of-service attack. This can be achieved by establishing more than 120 connections. Recommendations For...

CVE-2018-13993: Cross-Site Request Forgery (CSRF)

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 is prone to CSRF...

Design/Logic Flaw

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions prior to 1.35 is vulnerable to brute-force attacks, because of Improper Restriction of Excessive Authentication Attempts...

CVE-2018-13990

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions prior to 1.35 is vulnerable to brute-force attacks, because of Improper Restriction of Excessive Authentication Attempts...

CVE-2018-13990

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions prior to 1.35 is vulnerable to brute-force attacks, because of Improper Restriction of Excessive Authentication Attempts...

CVE-2018-13990

The CVE-2018-13990 entry targets PHOENIX CONTACT FL SWITCH series (3xxx, 4xxx, 48xx) with versions prior to 1.35. The vulnerability arises from Improper Restriction of Excessive Authentication Attempts, enabling brute-force login attempts against the Web UI. Exploitation could allow an attacker t...

CVE-2018-13990: Improper Authentication

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions prior to 1.35 is vulnerable to brute-force attacks, because of Improper Restriction of Excessive Authentication Attempts...

PT-2019-9013

Name of the Vulnerable Software and Affected Versions PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions prior to 1.35 Description The WebUI of the affected device is susceptible to brute-force attacks due to improper restriction of excessive authentication attempts. This allows attackers to...