Phoenix Contact FL SWITCH 跨站脚本漏洞

The PHOENIX CONTACT FL SWITCH is an industrial grade Ethernet switch from PHOENIX CONTACT, Germany. A cross-site scripting vulnerability exists in Phoenix Contact FL SWITCH versions prior to 3.50, which originates from improper input neutralization during web page generation...

Phoenix Contact FL SWITCH 跨站脚本漏洞

The PHOENIX CONTACT FL SWITCH is an industrial grade Ethernet switch from PHOENIX CONTACT, Germany. A cross-site scripting vulnerability exists in Phoenix Contact FL SWITCH versions prior to 3.50, which originates from a cross-site scripting attack that could result in modification of device...

EUVD-2018-5924

Malware in sbrugna...

EUVD-2018-5925

Malware in sbrugna...

EUVD-2021-8414

Malicious code in bioql PyPI...

CVE-2022-22509: Improper Privilege Management

In Phoenix Contact FL SWITCH Series 2xxx in version 3.00 an incorrect privilege assignment allows an low privileged user to enable full access to the device configuration...

PT-2022-15479

Name of the Vulnerable Software and Affected Versions Phoenix Contact FL SWITCH Series 2xxx version 3.00 Description The issue is related to an incorrect privilege assignment, allowing a low-privileged user to gain full access to the device configuration. Recommendations For Phoenix Contact FL...

CVE-2021-21005: Concurrent Execution using Shared Resource with Improper Synchronization

In Phoenix Contact FL SWITCH SMCS series products in multiple versions if an attacker sends a hand-crafted TCP-Packet with the Urgent-Flag set and the Urgent-Pointer set to 0, the network stack will crash. The device needs to be rebooted afterwards...

PT-2021-14332

Name of the Vulnerable Software and Affected Versions: Phoenix Contact FL SWITCH SMCS series products affected versions not specified Description: The issue concerns a network stack crash that occurs when a hand-crafted TCP-Packet with the Urgent-Flag set and the Urgent-Pointer set to 0 is sent t...

PT-2021-14331

Name of the Vulnerable Software and Affected Versions: Phoenix Contact FL SWITCH SMCS series products affected versions not specified Description: The issue allows an attacker to insert malicious code via LLDP frames into the web-based management, which could then be executed by the client...

PT-2021-14330

Name of the Vulnerable Software and Affected Versions: Phoenix Contact FL SWITCH SMCS series products affected versions not specified Description: The issue concerns fragmented TCP-Packets that may cause a Denial of Service of Web-, SNMP- and ICMP-Echo services in the affected products. The...

CVE-2021-21004: Improper Neutralization of Input During Web Page Generation

In Phoenix Contact FL SWITCH SMCS series products in multiple versions an attacker may insert malicious code via LLDP frames into the web-based management which could then be executed by the client...

CVE-2021-21003: Improper Resource Shutdown or Release

In Phoenix Contact FL SWITCH SMCS series products in multiple versions fragmented TCP-Packets may cause a Denial of Service of Web-, SNMP- and ICMP-Echo services. The switching functionality of the device is not affected...

Cross site request forgery (csrf)

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 is prone to CSRF...

CVE-2018-13991

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 leaks private information in firmware images...

CVE-2018-13993

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 is prone to CSRF...

CVE-2018-13991

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 leaks private information in firmware images...

CVE-2018-13994: Uncontrolled Resource Consumption

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 is vulnerable to a denial-of-service attack by making more than 120 connections...

CVE-2018-13991: Exposure of Sensitive Information to an Unauthorized Actor

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 leaks private information in firmware images...

PT-2019-9015

Name of the Vulnerable Software and Affected Versions PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 through 1.34 Description The WebUI of the affected devices allows for plaintext transmission of user credentials by default, which can be done over HTTP. Recommendations For versions 1.0...