PT-2018-1517

Name of the Vulnerable Software and Affected Versions Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products versions 1.0 through 1.33 Description The issue is related to OS command injection due to the lack of neutralization of special elements in OS command inputs. This can allow a remote...

PT-2018-1515

Name of the Vulnerable Software and Affected Versions Phoenix Contact FL SWITCH versions 1.0 through 1.33 Description The issue is caused by a buffer overflow in the memory of the menu pxc.cgi and index.cgi components of the managed switch firmware. This can be exploited by a remote attacker by...

The vulnerability of Phoenix Contact FL SWITCH router microprogramming software, related to deficiencies in authentication procedures, allows a malicious actor to gain access to the device with administrator privileges.

The vulnerability of Phoenix Contact FL SWITCH router microprogramming software is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain administrator privileges through specially crafted HTTP requests...

PHOENIX CONTACT FL SWITCH Unauthorized Access Vulnerability

FL SWITCH is a managed Ethernet switch from the Phoenix Contact group. An unauthorized access vulnerability exists in the PHOENIX CONTACT FL SWITCH, which allows a remote, unauthenticated attacker to gain administrative privileges on the device by constructing a special HTTP request that bypasses...

PHOENIX CONTACT FL SWITCH Information Disclosure Vulnerability

FL SWITCH is a managed Ethernet switch from the Phoenix Contact group. An information disclosure vulnerability exists in the PHOENIX CONTACT FL SWITCH, which could allow a remote, unauthenticated attacker to read diagnostic information by using "monitor mode" on the device...

CVE-2017-16743

An Improper Authorization issue was discovered in PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, and 48xxx Series products running firmware Version 1.0 to 1.32. A remote unauthenticated attacker may be able to craft special HTTP requests allowing an attacker to bypass web-service authentication allowing t...

Information disclosure

An Information Exposure issue was discovered in PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, and 48xxx Series products running firmware Version 1.0 to 1.32. A remote unauthenticated attacker may be able to use Monitor Mode on the device to read diagnostic information...

CVE-2017-16741

An Information Exposure issue was discovered in PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, and 48xxx Series products running firmware Version 1.0 to 1.32. A remote unauthenticated attacker may be able to use Monitor Mode on the device to read diagnostic information...

CVE-2017-16743

An Improper Authorization issue was discovered in PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, and 48xxx Series products running firmware Version 1.0 to 1.32. A remote unauthenticated attacker may be able to craft special HTTP requests allowing an attacker to bypass web-service authentication allowing t...

CVE-2017-16741

An Information Exposure issue was discovered in PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, and 48xxx Series products running firmware Version 1.0 to 1.32. A remote unauthenticated attacker may be able to use Monitor Mode on the device to read diagnostic information...

CVE-2017-16743

An Improper Authorization issue was discovered in PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, and 48xxx Series products running firmware Version 1.0 to 1.32. A remote unauthenticated attacker may be able to craft special HTTP requests allowing an attacker to bypass web-service authentication allowing t...

CVE-2017-16743

PHOENIX CONTACT FL SWITCH series (3xxx, 4xxx, 48xxx) running firmware 1.0–1.32 are affected by CVE-2017-16743, an Improper Authorization vulnerability. A remote unauthenticated attacker can craft special HTTP requests to bypass web-service authentication and gain administrative privileges on the ...

CVE-2017-16741

CVE-2017-16741 affects PHOENIX CONTACT FL SWITCH products (3xxx, 4xxx, 48xxx) running firmware 1.0–1.32. The flaw is Information Exposure via Monitor Mode, allowing a remote unauthenticated attacker to read diagnostic information. NVD entries assign a CVSSv3 base score of 5.3 (LOW) and CVSSv2 bas...

CVE-2017-16741

An Information Exposure issue was discovered in PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, and 48xxx Series products running firmware Version 1.0 to 1.32. A remote unauthenticated attacker may be able to use Monitor Mode on the device to read diagnostic information...

CVE-2017-16741: Exposure of Sensitive Information to an Unauthorized Actor

An Information Exposure issue was discovered in PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, and 48xxx Series products running firmware Version 1.0 to 1.32. A remote unauthenticated attacker may be able to use Monitor Mode on the device to read diagnostic information...

CVE-2017-16743: Improper Authorization

An Improper Authorization issue was discovered in PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, and 48xxx Series products running firmware Version 1.0 to 1.32. A remote unauthenticated attacker may be able to craft special HTTP requests allowing an attacker to bypass web-service authentication allowing t...

PT-2018-1007

Name of the Vulnerable Software and Affected Versions PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, and 48xxx Series products versions 1.0 through 1.32 Description An issue with improper authorization was found, allowing a remote unauthenticated attacker to craft special HTTP requests to bypass web-servi...

PHOENIX CONTACT FL SWITCH

CVSS v3 9.8 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: PHOENIX CONTACT Equipment: FL SWITCH Vulnerabilities: Improper Authorization, Information Exposure AFFECTED PRODUCTS All FL SWITCH 3xxx, 4xxx, and 48xxx Series products running firmware Version 1.0 to 1.32 are affecte...

PT-2017-14879

Name of the Vulnerable Software and Affected Versions FS Makemytrip Clone version 1.0 Description The issue is related to SQL Injection, which can be exploited via the "show-flight-result.php" endpoint, specifically through the fl orig or fl dest parameters. Recommendations For FS Makemytrip Clon...

Cross site scripting

A Cross-site Scripting issue was discovered in PHOENIX CONTACT FL COMSERVER BASIC 232/422/485, FL COMSERVER UNI 232/422/485, FL COMSERVER BAS 232/422/485-T, FL COMSERVER UNI 232/422/485-T, FL COM SERVER RS232, FL COM SERVER RS485, and PSI-MODEM/ETH running firmware versions prior to 1.99, 2.20, o...