CVE Feed

    Dashboard / CVE / CVE-2017-16743

    CVE-2017-16743

    An Improper Authorization issue was discovered in PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, and 48xxx Series products running firmware Version 1.0 to 1.32. A remote unauthenticated attacker may be able to craft special HTTP requests allowing an attacker to bypass web-service authentication allowing the attacker to obtain administrative privileges on the device.

    Published:Jan 12, 2018
    Last Modified:Nov 21, 2024
    EPS:Jan 12, 2018
    EPSS Score:0.01644
    CVSS Score:9.8

    Affected Products

    Vendor
    Phoenixcontact
    Product
    Fl Switch 3004t-fx
    Vendor
    Phoenixcontact
    Product
    Fl Switch 3004t-fx Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Switch 3004t-fx St
    Vendor
    Phoenixcontact
    Product
    Fl Switch 3004t-fx St Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Switch 3005
    Vendor
    Phoenixcontact
    Product
    Fl Switch 3005 Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Switch 3005t
    Vendor
    Phoenixcontact
    Product
    Fl Switch 3005t Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Switch 3006t-2fx
    Vendor
    Phoenixcontact
    Product
    Fl Switch 3006t-2fx Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Switch 3006t-2fx Sm
    Vendor
    Phoenixcontact
    Product
    Fl Switch 3006t-2fx Sm Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Switch 3006t-2fx St
    Vendor
    Phoenixcontact
    Product
    Fl Switch 3006t-2fx St Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Switch 3008
    Vendor
    Phoenixcontact
    Product
    Fl Switch 3008 Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Switch 3008t
    Vendor
    Phoenixcontact
    Product
    Fl Switch 3008t Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Switch 3012e-2fx Sm
    Vendor
    Phoenixcontact
    Product
    Fl Switch 3012e-2fx Sm Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Switch 3012e-2sfx
    Vendor
    Phoenixcontact
    Product
    Fl Switch 3012e-2sfx Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Switch 3016
    Vendor
    Phoenixcontact
    Product
    Fl Switch 3016 Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Switch 3016e
    Vendor
    Phoenixcontact
    Product
    Fl Switch 3016e Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Switch 3016t
    Vendor
    Phoenixcontact
    Product
    Fl Switch 3016t Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Switch 4000t-8poe-2sfp-r
    Vendor
    Phoenixcontact
    Product
    Fl Switch 4000t-8poe-2sfp-r Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Switch 4008t-2gt-3fx Sm
    Vendor
    Phoenixcontact
    Product
    Fl Switch 4008t-2gt-3fx Sm Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Switch 4008t-2gt-4fx Sm
    Vendor
    Phoenixcontact
    Product
    Fl Switch 4008t-2gt-4fx Sm Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Switch 4008t-2sfp
    Vendor
    Phoenixcontact
    Product
    Fl Switch 4008t-2sfp Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Switch 4012t-2gt-2fx St
    Vendor
    Phoenixcontact
    Product
    Fl Switch 4012t-2gt-2fx St Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Switch 4012t 2gt 2fx
    Vendor
    Phoenixcontact
    Product
    Fl Switch 4012t 2gt 2fx Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Switch 4800e-24fx-4gc
    Vendor
    Phoenixcontact
    Product
    Fl Switch 4800e-24fx-4gc Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Switch 4800e-24fx Sm-4gc
    Vendor
    Phoenixcontact
    Product
    Fl Switch 4800e-24fx Sm-4gc Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Switch 4808e-16fx-4gc
    Vendor
    Phoenixcontact
    Product
    Fl Switch 4808e-16fx-4gc Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Switch 4808e-16fx Lc-4gc
    Vendor
    Phoenixcontact
    Product
    Fl Switch 4808e-16fx Lc-4gc Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Switch 4808e-16fx Sm-4gc
    Vendor
    Phoenixcontact
    Product
    Fl Switch 4808e-16fx Sm-4gc Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Switch 4808e-16fx Sm Lc-4gc
    Vendor
    Phoenixcontact
    Product
    Fl Switch 4808e-16fx Sm Lc-4gc Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Switch 4808e-16fx Sm St-4gc
    Vendor
    Phoenixcontact
    Product
    Fl Switch 4808e-16fx Sm St-4gc Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Switch 4808e-16fx St-4gc
    Vendor
    Phoenixcontact
    Product
    Fl Switch 4808e-16fx St-4gc Firmware
    Vendor
    Phoenixcontact
    Product
    Fl Switch 4824e-4gc
    Vendor
    Phoenixcontact
    Product
    Fl Switch 4824e-4gc Firmware

    Exploits

    No exploit reference

    Related CVEs

    CVE-2018-13994 (CVSS 7.5) — The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 is vulnerable to a denial-of-serv…
    CVE-2018-13993 (CVSS 8.8) — The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 is prone to CSRF.…
    CVE-2018-13992 (CVSS 8.2) — The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 allows for plaintext transmission…
    CVE-2018-13991 (CVSS 5.3) — The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 leaks private information in firm…
    CVE-2018-13990 (CVSS 8.6) — The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions prior to 1.35 is vulnerable to brute-force at…
    CVE-2018-10731 (CVSS 9) — All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone…
    CVE-2018-10728 (CVSS 8.1) — All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone…
    CVE-2018-10730 (CVSS 9.1) — All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone…
    CVE-2018-10729 (CVSS 5.3) — All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 allow rea…
    CVE-2017-16741 (CVSS 5.3) — An Information Exposure issue was discovered in PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, and 48xxx Series product…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High