PT-2019-12504

Name of the Vulnerable Software and Affected Versions OPNsense versions prior to 19.1.8 pfsense versions prior to 2.4.4-p3 Description The issue is related to incorrect access control in the WebUI, allowing remote authenticated users to escalate privileges to administrator via a specially crafted...

CVE-2019-11816: Undefined Security Weakness

Incorrect access control in the WebUI in OPNsense before version 19.1.8, and pfsense before 2.4.4-p3 allows remote authenticated users to escalate privileges to administrator via a specially crafted request...

CVE-2018-13993

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 is prone to CSRF...

Design/Logic Flaw

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 is vulnerable to a denial-of-service attack by making more than 120 connections...

CVE-2018-13991

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 leaks private information in firmware images...

CVE-2018-13993

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 is prone to CSRF...

CVE-2018-13994

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 is vulnerable to a denial-of-service attack by making more than 120 connections...

Cross site request forgery (csrf)

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 is prone to CSRF...

Information disclosure

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 leaks private information in firmware images...

CVE-2018-13994

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 is vulnerable to a denial-of-service attack by making more than 120 connections...

CVE-2018-13994

PHOENIX CONTACT FL SWITCH 3xxx, 4xxx and 48xx devices running firmware versions 1.0–1.34 are affected by CVE-2018-13994, a Denial-of-Service via the Web UI caused by resource exhaustion from more than 120 concurrent connections. Affected product family and version range are explicitly stated; mit...

CVE-2018-13993

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 is prone to CSRF...

CVE-2018-13993

The CVE-2018-13993 entry describes a Cross-Site Request Forgery (CSRF) vulnerability in the WebUI of Phoenix Contact FL SWITCH family (3xxx, 4xxx, 48xx) versions before 1.35. The underlying issue allows a remote attacker to trick an authenticated user’s browser into issuing unwanted commands, wit...

CVE-2018-13992

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 allows for plaintext transmission HTTP of user credentials by default...

CVE-2018-13991

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 leaks private information in firmware images...

CVE-2018-13991

CVE-2018-13991 affects PHOENIX CONTACT FL SWITCH 3xxx/4xxx/48xx, firmware versions 1.0–1.34. Root cause: insecure storage of sensitive information in the switch Web UI, enabling leakage of private information (e.g., private keys) from firmware images. Related advisories note multiple vulnerabilit...

PT-2019-9014

Name of the Vulnerable Software and Affected Versions PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 through 1.34 Description The WebUI of the affected devices leaks private information in firmware images. Recommendations For versions 1.0 through 1.34, consider restricting access to the...

PT-2019-9015

Name of the Vulnerable Software and Affected Versions PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 through 1.34 Description The WebUI of the affected devices allows for plaintext transmission of user credentials by default, which can be done over HTTP. Recommendations For versions 1.0...

CVE-2018-13994: Uncontrolled Resource Consumption

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 is vulnerable to a denial-of-service attack by making more than 120 connections...

PT-2019-9017

Name of the Vulnerable Software and Affected Versions PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 through 1.34 Description The WebUI of the affected device is susceptible to a denial-of-service attack. This can be achieved by establishing more than 120 connections. Recommendations For...