var-201805-0693
Vulnerability from variot
All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to buffer overflows when handling very large cookies (a different vulnerability than CVE-2018-10728). plural Phoenix Contact FL SWITCH The product contains a buffer error vulnerability. This vulnerability CVE-2018-10728 Is a different vulnerability.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. PHOENIXCONTACTFLSWITCH3xxx, 4xxx and 48xxxSeries are all different series of switch devices from the Phoenix Contact group in Germany. A stack buffer overflow vulnerability exists in PHOENIXCONTACTFLSWITCH3xxx, 4xxx, and 48xxxSeries products using firmware versions 1.0 through 1.32. A remote attacker could exploit the vulnerability to gain unauthorized access to the switch operating system files and to inject executable code into the operating system. An OS command-execution vulnerability 2. An information-disclosure vulnerability 3. Multiple stack-based buffer-overflow vulnerabilities Attackers can exploit these issues to execute arbitrary code, execute arbitrary OS commands, obtain sensitive information, and perform unauthorized actions. Failed exploit attempts will likely cause a denial-of-service condition
Show details on source website{ "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" } }, "@id": "https://www.variotdbs.pl/vuln/VAR-201805-0693", "affected_products": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "model": "fl switch 4000t-8poe-2sfp-r", "scope": "gte", "trust": 1.0, "vendor": "phoenixcontact", "version": "1.0" }, { "model": "fl switch 3008t", "scope": "gte", "trust": 1.0, "vendor": "phoenixcontact", "version": "1.0" }, { "model": "fl switch 4008t-2sfp", "scope": "gte", "trust": 1.0, "vendor": "phoenixcontact", "version": "1.0" }, { "model": "fl switch 4808e-16fx lc-4gc", "scope": "lte", "trust": 1.0, "vendor": "phoenixcontact", "version": "1.33" }, { "model": "fl switch 4808e-16fx sm lc-4gc", "scope": "gte", "trust": 1.0, "vendor": "phoenixcontact", "version": "1.0" }, { "model": "fl switch 4012t-2gt-2fx st", "scope": "lte", "trust": 1.0, "vendor": "phoenixcontact", "version": "1.33" }, { "model": "fl switch 3016", "scope": "lte", "trust": 1.0, "vendor": "phoenixcontact", "version": "1.33" }, { "model": "fl switch 3016", "scope": "gte", "trust": 1.0, "vendor": "phoenixcontact", "version": "1.0" }, { "model": "fl switch 3004t-fx", "scope": "gte", "trust": 1.0, "vendor": "phoenixcontact", "version": "1.0" }, { "model": "fl switch 3006t-2fx", "scope": "lte", "trust": 1.0, "vendor": "phoenixcontact", "version": "1.33" }, { "model": "fl switch 3008", "scope": "gte", "trust": 1.0, "vendor": "phoenixcontact", "version": "1.0" }, { "model": "fl switch 4808e-16fx st-4gc", "scope": "lte", "trust": 1.0, "vendor": "phoenixcontact", "version": "1.33" }, { "model": "fl switch 4012t-2gt-2fx st", "scope": "gte", "trust": 1.0, "vendor": "phoenixcontact", "version": "1.0" }, { "model": "fl switch 3005t", "scope": "gte", "trust": 1.0, "vendor": "phoenixcontact", "version": "1.0" }, { "model": "fl switch 3016e", "scope": "lte", "trust": 1.0, "vendor": "phoenixcontact", "version": "1.33" }, { "model": "fl switch 4008t-2gt-4fx sm", "scope": "lte", "trust": 1.0, "vendor": "phoenixcontact", "version": "1.33" }, { "model": "fl switch 4800e-24fx-4gc", "scope": "lte", "trust": 1.0, "vendor": "phoenixcontact", "version": "1.33" }, { "model": "fl switch 3006t-2fx", "scope": "gte", "trust": 1.0, "vendor": "phoenixcontact", "version": "1.0" }, { "model": "fl switch 4808e-16fx lc-4gc", "scope": "gte", "trust": 1.0, "vendor": "phoenixcontact", "version": "1.0" }, { "model": "fl switch 4012t 2gt 2fx", "scope": "lte", "trust": 1.0, "vendor": "phoenixcontact", "version": "1.33" }, { "model": "fl switch 3012e-2fx sm", "scope": "gte", "trust": 1.0, "vendor": "phoenixcontact", "version": "1.0" }, { "model": "fl switch 3016e", "scope": "gte", "trust": 1.0, "vendor": "phoenixcontact", "version": "1.0" }, { "model": "fl switch 4824e-4gc", "scope": "lte", "trust": 1.0, "vendor": "phoenixcontact", "version": "1.33" }, { "model": "fl switch 4012t 2gt 2fx", "scope": "gte", "trust": 1.0, "vendor": "phoenixcontact", "version": "1.0" }, { "model": "fl switch 4800e-24fx-4gc", "scope": "gte", "trust": 1.0, "vendor": "phoenixcontact", "version": "1.0" }, { "model": "fl switch 4808e-16fx st-4gc", "scope": "gte", "trust": 1.0, "vendor": "phoenixcontact", "version": "1.0" }, { "model": "fl switch 4808e-16fx sm-4gc", "scope": "lte", "trust": 1.0, "vendor": "phoenixcontact", "version": "1.33" }, { "model": "fl switch 4008t-2gt-3fx sm", "scope": "lte", "trust": 1.0, "vendor": "phoenixcontact", "version": "1.33" }, { "model": "fl switch 3005", "scope": "lte", "trust": 1.0, "vendor": "phoenixcontact", "version": "1.33" }, { "model": "fl switch 3016t", "scope": "lte", "trust": 1.0, "vendor": "phoenixcontact", "version": "1.33" }, { "model": "fl switch 4008t-2gt-4fx sm", "scope": "gte", "trust": 1.0, "vendor": "phoenixcontact", "version": "1.0" }, { "model": "fl switch 3005", "scope": "gt", "trust": 1.0, "vendor": "phoenixcontact", "version": "1.0" }, { "model": "fl switch 3004t-fx st", "scope": "lte", "trust": 1.0, "vendor": "phoenixcontact", "version": "1.33" }, { "model": "fl switch 4808e-16fx sm-4gc", "scope": "gte", "trust": 1.0, "vendor": "phoenixcontact", "version": "1.0" }, { "model": "fl switch 4800e-24fx sm-4gc", "scope": "lte", "trust": 1.0, "vendor": "phoenixcontact", "version": "1.33" }, { "model": "fl switch 3012e-2sfx", "scope": "lte", "trust": 1.0, "vendor": "phoenixcontact", "version": "1.33" }, { "model": "fl switch 4808e-16fx-4gc", "scope": "lte", "trust": 1.0, "vendor": "phoenixcontact", "version": "1.33" }, { "model": "fl switch 4008t-2gt-3fx sm", "scope": "gte", "trust": 1.0, "vendor": "phoenixcontact", "version": "1.0" }, { "model": "fl switch 3012e-2fx sm", "scope": "lte", "trust": 1.0, "vendor": "phoenixcontact", "version": "1.33" }, { "model": "fl switch 3004t-fx st", "scope": "gte", "trust": 1.0, "vendor": "phoenixcontact", "version": "1.0" }, { "model": "fl switch 4824e-4gc", "scope": "gte", "trust": 1.0, "vendor": "phoenixcontact", "version": "1.0" }, { "model": "fl switch 4800e-24fx sm-4gc", "scope": "gte", "trust": 1.0, "vendor": "phoenixcontact", "version": "1.0" }, { "model": "fl switch 4000t-8poe-2sfp-r", "scope": "lte", "trust": 1.0, "vendor": "phoenixcontact", "version": "1.33" }, { "model": "fl switch 3006t-2fx st", "scope": "lte", "trust": 1.0, "vendor": "phoenixcontact", "version": "1.33" }, { "model": "fl switch 3016t", "scope": "gte", "trust": 1.0, "vendor": "phoenixcontact", "version": "1.0" }, { "model": "fl switch 3008t", "scope": "lte", "trust": 1.0, "vendor": "phoenixcontact", "version": "1.33" }, { "model": "fl switch 3006t-2fx sm", "scope": "lte", "trust": 1.0, "vendor": "phoenixcontact", "version": "1.33" }, { "model": "fl switch 4008t-2sfp", "scope": "lte", "trust": 1.0, "vendor": "phoenixcontact", "version": "1.33" }, { "model": "fl switch 3008", "scope": "lte", "trust": 1.0, "vendor": "phoenixcontact", "version": "1.33" }, { "model": "fl switch 4808e-16fx sm lc-4gc", "scope": "lte", "trust": 1.0, "vendor": "phoenixcontact", "version": "1.33" }, { "model": "fl switch 3006t-2fx sm", "scope": "gte", "trust": 1.0, "vendor": "phoenixcontact", "version": "1.0" }, { "model": "fl switch 4808e-16fx sm st-4gc", "scope": "lte", "trust": 1.0, "vendor": "phoenixcontact", "version": "1.33" }, { "model": "fl switch 3004t-fx", "scope": "lte", "trust": 1.0, "vendor": "phoenixcontact", "version": "1.33" }, { "model": "fl switch 3006t-2fx st", "scope": "gte", "trust": 1.0, "vendor": "phoenixcontact", "version": "1.0" }, { "model": "fl switch 4808e-16fx-4gc", "scope": "gte", "trust": 1.0, "vendor": "phoenixcontact", "version": "1.0" }, { "model": "fl switch 3012e-2sfx", "scope": "gte", "trust": 1.0, "vendor": "phoenixcontact", "version": "1.0" }, { "model": "fl switch 4808e-16fx sm st-4gc", "scope": "gte", "trust": 1.0, "vendor": "phoenixcontact", "version": "1.0" }, { "model": "fl switch 3005t", "scope": "lte", "trust": 1.0, "vendor": "phoenixcontact", "version": "1.33" }, { "model": "fl switch 3004t-fx st", "scope": "eq", "trust": 0.8, "vendor": "phoenix contact", "version": "1.0 to 1.33" }, { "model": "fl switch 3004t-fx", "scope": "eq", "trust": 0.8, "vendor": "phoenix contact", "version": "1.0 to 1.33" }, { "model": "fl switch 3005", "scope": "eq", "trust": 0.8, "vendor": "phoenix contact", "version": "1.0 to 1.33" }, { "model": "fl switch 3005t", "scope": "eq", "trust": 0.8, "vendor": "phoenix contact", "version": "1.0 to 1.33" }, { "model": "fl switch 3006t-2fx sm", "scope": "eq", "trust": 0.8, "vendor": "phoenix contact", "version": "1.0 to 1.33" }, { "model": "fl switch 3006t-2fx st", "scope": "eq", "trust": 0.8, "vendor": "phoenix contact", "version": "1.0 to 1.33" }, { "model": "fl switch 3006t-2fx", "scope": "eq", "trust": 0.8, "vendor": "phoenix contact", "version": "1.0 to 1.33" }, { "model": "fl switch 3008", "scope": "eq", "trust": 0.8, "vendor": "phoenix contact", "version": "1.0 to 1.33" }, { "model": "fl switch 3008t", "scope": "eq", "trust": 0.8, "vendor": "phoenix contact", "version": "1.0 to 1.33" }, { "model": "fl switch 3012e-2fx sm", "scope": "eq", "trust": 0.8, "vendor": "phoenix contact", "version": "1.0 to 1.33" }, { "model": "fl switch 3012e-2sfx", "scope": "eq", "trust": 0.8, "vendor": "phoenix contact", "version": "1.0 to 1.33" }, { "model": "fl switch 3016", "scope": "eq", "trust": 0.8, "vendor": "phoenix contact", "version": "1.0 to 1.33" }, { "model": "fl switch 3016e", "scope": "eq", "trust": 0.8, "vendor": "phoenix contact", "version": "1.0 to 1.33" }, { "model": "fl switch 3016t", "scope": "eq", "trust": 0.8, "vendor": "phoenix contact", "version": "1.0 to 1.33" }, { "model": "fl switch 4000t-8poe-2sfp-r", "scope": "eq", "trust": 0.8, "vendor": "phoenix contact", "version": "1.0 to 1.33" }, { "model": "fl switch 4008t-2gt-3fx sm", "scope": "eq", "trust": 0.8, "vendor": "phoenix contact", "version": "1.0 to 1.33" }, { "model": "fl switch 4008t-2gt-4fx sm", "scope": "eq", "trust": 0.8, "vendor": "phoenix contact", "version": "1.0 to 1.33" }, { "model": "fl switch 4008t-2sfp", "scope": "eq", "trust": 0.8, "vendor": "phoenix contact", "version": "1.0 to 1.33" }, { "model": "fl switch 4012t 2gt 2fx", "scope": "eq", "trust": 0.8, "vendor": "phoenix contact", "version": "1.0 to 1.33" }, { "model": "fl switch 4012t-2gt-2fx st", "scope": "eq", "trust": 0.8, "vendor": "phoenix contact", "version": "1.0 to 1.33" }, { "model": "fl switch 4800e-24fx sm-4gc", "scope": "eq", "trust": 0.8, "vendor": "phoenix contact", "version": "1.0 to 1.33" }, { "model": "fl switch 4800e-24fx-4gc", "scope": "eq", "trust": 0.8, "vendor": "phoenix contact", "version": "1.0 to 1.33" }, { "model": "fl switch 4808e-16fx lc-4gc", "scope": "eq", "trust": 0.8, "vendor": "phoenix contact", "version": "1.0 to 1.33" }, { "model": "fl switch 4808e-16fx sm lc-4gc", "scope": "eq", "trust": 0.8, "vendor": "phoenix contact", "version": "1.0 to 1.33" }, { "model": "fl switch 4808e-16fx sm st-4gc", "scope": "eq", "trust": 0.8, "vendor": "phoenix contact", "version": "1.0 to 1.33" }, { "model": "fl switch 4808e-16fx sm-4gc", "scope": "eq", "trust": 0.8, "vendor": "phoenix contact", "version": "1.0 to 1.33" }, { "model": "fl switch 4808e-16fx st-4gc", "scope": "eq", "trust": 0.8, "vendor": "phoenix contact", "version": "1.0 to 1.33" }, { "model": "fl switch 4808e-16fx-4gc", "scope": "eq", "trust": 0.8, "vendor": "phoenix contact", "version": "1.0 to 1.33" }, { "model": "fl switch 4824e-4gc", "scope": "eq", "trust": 0.8, "vendor": "phoenix contact", "version": "1.0 to 1.33" }, { "model": "contact fl switch series", "scope": "eq", "trust": 0.6, "vendor": "phoenix", "version": "3xxx" }, { "model": "contact fl switch series", "scope": "eq", "trust": 0.6, "vendor": "phoenix", "version": "4xxx" }, { "model": "contact fl switch series", "scope": "eq", "trust": 0.6, "vendor": "phoenix", "version": "48xx" }, { "model": "contact fl switch series", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "4xxx1.32" }, { "model": "contact fl switch series", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "4xxx1.0" }, { "model": "contact fl switch series", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "48xx1.32" }, { "model": "contact fl switch series", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "48xx1.0" }, { "model": "contact fl switch 4824e-4gc", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "1.32" }, { "model": "contact fl switch 4824e-4gc", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "1.0" }, { "model": "contact fl switch 4808e-16fx-4gc", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "1.32" }, { "model": "contact fl switch 4808e-16fx-4gc", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "1.0" }, { "model": "contact fl switch 4808e-16fx st-4gc", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "1.32" }, { "model": "contact fl switch 4808e-16fx st-4gc", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "1.0" }, { "model": "contact fl switch 4808e-16fx sm-4gc", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "1.32" }, { "model": "contact fl switch 4808e-16fx sm-4gc", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "1.0" }, { "model": "contact fl switch 4808e-16fx sm st-4gc", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "1.32" }, { "model": "contact fl switch 4808e-16fx sm st-4gc", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "1.0" }, { "model": "contact fl switch 4808e-16fx sm lc-4gc", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "1.32" }, { "model": "contact fl switch 4808e-16fx sm lc-4gc", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "1.0" }, { "model": "contact fl switch 4808e-16fx lc-4gc", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "1.32" }, { "model": "contact fl switch 4808e-16fx lc-4gc", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "1.0" }, { "model": "contact fl switch 4800e-24fx-4gc", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "1.32" }, { "model": "contact fl switch 4800e-24fx-4gc", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "1.0" }, { "model": "contact fl switch 4800e-24fx sm-4gc", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "1.32" }, { "model": "contact fl switch 4800e-24fx sm-4gc", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "1.0" }, { "model": "contact fl switch 4012t-2gt-2fx st", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "1.32" }, { "model": "contact fl switch 4012t-2gt-2fx st", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "1.0" }, { "model": "contact fl switch 4012t 2gt 2fx", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "1.32" }, { "model": "contact fl switch 4012t 2gt 2fx", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "1.0" }, { "model": "contact fl switch 4008t-2sfp", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "1.32" }, { "model": "contact fl switch 4008t-2sfp", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "1.0" }, { "model": "contact fl switch 4008t-2gt-4fx sm", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "1.32" }, { "model": "contact fl switch 4008t-2gt-4fx sm", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "1.0" }, { "model": "contact fl switch 4008t-2gt-3fx sm", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "1.32" }, { "model": "contact fl switch 4008t-2gt-3fx sm", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "1.0" }, { "model": "contact fl switch 4000t-8poe-2sfp-r", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "1.32" }, { "model": "contact fl switch 4000t-8poe-2sfp-r", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "1.0" }, { "model": "contact fl switch series", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "3xxx1.32" }, { "model": "contact fl switch series", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "3xxx1.0" }, { "model": "contact fl switch 3016t", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "1.32" }, { "model": "contact fl switch 3016t", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "1.0" }, { "model": "contact fl switch 3016e", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "1.32" }, { "model": "contact fl switch 3016e", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "1.0" }, { "model": "contact fl switch", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "30161.32" }, { "model": "contact fl switch", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "30161.0" }, { "model": "contact fl switch 3012e-2sfx", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "1.32" }, { "model": "contact fl switch 3012e-2sfx", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "1.0" }, { "model": "contact fl switch 3012e-2fx sm", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "1.32" }, { "model": "contact fl switch 3012e-2fx sm", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "1.0" }, { "model": "contact fl switch 3008t", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "1.32" }, { "model": "contact fl switch 3008t", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "1.0" }, { "model": "contact fl switch", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "30081.32" }, { "model": "contact fl switch", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "30081.0" }, { "model": "contact fl switch 3006t-2fx st", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "1.32" }, { "model": "contact fl switch 3006t-2fx st", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "1.0" }, { "model": "contact fl switch 3006t-2fx sm", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "1.32" }, { "model": "contact fl switch 3006t-2fx sm", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "1.0" }, { "model": "contact fl switch 3006t-2fx", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "1.32" }, { "model": "contact fl switch 3006t-2fx", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "1.0" }, { "model": "contact fl switch 3005t", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "1.32" }, { "model": "contact fl switch 3005t", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "1.0" }, { "model": "contact fl switch", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "30051.32" }, { "model": "contact fl switch", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "30051.0" }, { "model": "contact fl switch 3004t-fx st", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "1.32" }, { "model": "contact fl switch 3004t-fx st", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "1.0" }, { "model": "contact fl switch 3004t-fx", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "1.32" }, { "model": "contact fl switch 3004t-fx", "scope": "eq", "trust": 0.3, "vendor": "phoenix", "version": "1.0" }, { "model": "contact fl switch 4824e-4gc", "scope": "ne", "trust": 0.3, "vendor": "phoenix", "version": "1.34" }, { "model": "contact fl switch 4808e-16fx-4gc", "scope": "ne", "trust": 0.3, "vendor": "phoenix", "version": "1.34" }, { "model": "contact fl switch 4808e-16fx st-4gc", "scope": "ne", "trust": 0.3, "vendor": "phoenix", "version": "1.34" }, { "model": "contact fl switch 4808e-16fx sm-4gc", "scope": "ne", "trust": 0.3, "vendor": "phoenix", "version": "1.34" }, { "model": "contact fl switch 4808e-16fx sm st-4gc", "scope": "ne", "trust": 0.3, "vendor": "phoenix", "version": "1.34" }, { "model": "contact fl switch 4808e-16fx sm lc-4gc", "scope": "ne", "trust": 0.3, "vendor": "phoenix", "version": "1.34" }, { "model": "contact fl switch 4800e-24fx-4gc", "scope": "ne", "trust": 0.3, "vendor": "phoenix", "version": "1.34" }, { "model": "contact fl switch 4800e-24fx sm-4gc", "scope": "ne", "trust": 0.3, "vendor": "phoenix", "version": "1.34" }, { "model": "contact fl switch 4012t-2gt-2fx st", "scope": "ne", "trust": 0.3, "vendor": "phoenix", "version": "1.34" }, { "model": "contact fl switch 4012t 2gt 2fx", "scope": "ne", "trust": 0.3, "vendor": "phoenix", "version": "1.34" }, { "model": "contact fl switch 4008t-2sfp", "scope": "ne", "trust": 0.3, "vendor": "phoenix", "version": "1.34" }, { "model": "contact fl switch 4008t-2gt-4fx sm", "scope": "ne", "trust": 0.3, "vendor": "phoenix", "version": "1.34" }, { "model": "contact fl switch 4008t-2gt-3fx sm", "scope": "ne", "trust": 0.3, "vendor": "phoenix", "version": "1.34" }, { "model": "contact fl switch 4000t-8poe-2sfp-r", "scope": "ne", "trust": 0.3, "vendor": "phoenix", "version": "1.34" }, { "model": "contact fl switch 3016t", "scope": "ne", "trust": 0.3, "vendor": "phoenix", "version": "1.34" }, { "model": "contact fl switch 3016e", "scope": "ne", "trust": 0.3, "vendor": "phoenix", "version": "1.34" }, { "model": "contact fl switch", "scope": "ne", "trust": 0.3, "vendor": "phoenix", "version": "30161.34" }, { "model": "contact fl switch 3012e-2sfx", "scope": "ne", "trust": 0.3, "vendor": "phoenix", "version": "1.34" }, { "model": "contact fl switch 3012e-2fx sm", "scope": "ne", "trust": 0.3, "vendor": "phoenix", "version": "1.34" }, { "model": "contact fl switch 3008t", "scope": "ne", "trust": 0.3, "vendor": "phoenix", "version": "1.34" }, { "model": "contact fl switch", "scope": "ne", "trust": 0.3, "vendor": "phoenix", "version": "30081.34" }, { "model": "contact fl switch 3006t-2fx sm", "scope": "ne", "trust": 0.3, "vendor": "phoenix", "version": "1.34" }, { "model": "contact fl switch 3006t-2fx", "scope": "ne", "trust": 0.3, "vendor": "phoenix", "version": "1.34" }, { "model": "contact fl switch 3005t", "scope": "ne", "trust": 0.3, "vendor": "phoenix", "version": "1.34" }, { "model": "contact fl switch", "scope": "ne", "trust": 0.3, "vendor": "phoenix", "version": "30051.34" }, { "model": "contact fl switch 3004t-fx st", "scope": "ne", "trust": 0.3, "vendor": "phoenix", "version": "1.34" }, { "model": "contact fl switch 3004t-fx", "scope": "ne", "trust": 0.3, "vendor": "phoenix", "version": "1.34" }, { "model": "contact fl switch -4804g8ce-16fx lc", "scope": "ne", "trust": 0.3, "vendor": "phoenix", "version": "1.34" } ], "sources": [ { "db": "CNVD", "id": "CNVD-2018-14414" }, { "db": "BID", "id": "104231" }, { "db": "JVNDB", "id": "JVNDB-2018-005167" }, { "db": "NVD", "id": "CVE-2018-10731" } ] }, "configurations": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/configurations#", "children": { "@container": "@list" }, "cpe_match": { "@container": "@list" }, "data": { "@container": "@list" }, "nodes": { "@container": "@list" } }, "data": [ { "CVE_data_version": "4.0", "nodes": [ { "cpe_match": [ { "cpe22Uri": "cpe:/o:phoenixcontact:fl_switch_3004t-fx_st_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:phoenixcontact:fl_switch_3004t-fx_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:phoenixcontact:fl_switch_3005_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:phoenixcontact:fl_switch_3005t_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:phoenixcontact:fl_switch_3006t-2fx_sm_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:phoenixcontact:fl_switch_3006t-2fx_st_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:phoenixcontact:fl_switch_3006t-2fx_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:phoenixcontact:fl_switch_3008_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:phoenixcontact:fl_switch_3008t_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:phoenixcontact:fl_switch_3012e-2fx_sm_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:phoenixcontact:fl_switch_3012e-2sfx_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:phoenixcontact:fl_switch_3016_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:phoenixcontact:fl_switch_3016e_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:phoenixcontact:fl_switch_3016t_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:phoenixcontact:fl_switch_4000t-8poe-2sfp-r_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:phoenixcontact:fl_switch_4008t-2gt-3fx_sm_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:phoenixcontact:fl_switch_4008t-2gt-4fx_sm_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:phoenixcontact:fl_switch_4008t-2sfp_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:phoenixcontact:fl_switch_4012t_2gt_2fx_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:phoenixcontact:fl_switch_4012t-2gt-2fx_st_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:phoenixcontact:fl_switch_4800e-24fx_sm-4gc_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:phoenixcontact:fl_switch_4800e-24fx-4gc_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:phoenixcontact:fl_switch_4808e-16fx_lc-4gc_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:phoenixcontact:fl_switch_4808e-16fx_sm_lc-4gc_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:phoenixcontact:fl_switch_4808e-16fx_sm_st-4gc_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:phoenixcontact:fl_switch_4808e-16fx_sm-4gc_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:phoenixcontact:fl_switch_4808e-16fx_st-4gc_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:phoenixcontact:fl_switch_4808e-16fx-4gc_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:phoenixcontact:fl_switch_4824e-4gc_firmware", "vulnerable": true } ], "operator": "OR" } ] } ], "sources": [ { "db": "JVNDB", "id": "JVNDB-2018-005167" } ] }, "credits": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/credits#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "ERT@VDE working with Vyacheslav Moskvin, Semen Sokolov, Evgeniy Druzhinin, Georgy Zaytsev and Ilya Karpov of Positive Technologies and PHOENIX CONTACT.", "sources": [ { "db": "BID", "id": "104231" } ], "trust": 0.3 }, "cve": "CVE-2018-10731", "cvss": { "@context": { "cvssV2": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2" }, "cvssV3": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/" }, "severity": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" }, "@id": "https://www.variotdbs.pl/ref/cvss/severity" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "cvssV2": [ { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "author": "nvd@nist.gov", "availabilityImpact": "COMPLETE", "baseScore": 9.3, "confidentialityImpact": "COMPLETE", "exploitabilityScore": 8.6, "id": "CVE-2018-10731", "impactScore": 10.0, "integrityImpact": "COMPLETE", "severity": "HIGH", "trust": 1.8, "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "version": "2.0" }, { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "author": "CNVD", "availabilityImpact": "COMPLETE", "baseScore": 9.3, "confidentialityImpact": "COMPLETE", "exploitabilityScore": 8.6, "id": "CNVD-2018-14414", "impactScore": 10.0, "integrityImpact": "COMPLETE", "severity": "HIGH", "trust": 0.6, "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "version": "2.0" } ], "cvssV3": [ { "attackComplexity": "HIGH", "attackVector": "NETWORK", "author": "nvd@nist.gov", "availabilityImpact": "HIGH", "baseScore": 9.0, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "exploitabilityScore": 2.2, "id": "CVE-2018-10731", "impactScore": 6.0, "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "trust": 1.8, "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H", "version": "3.0" } ], "severity": [ { "author": "nvd@nist.gov", "id": "CVE-2018-10731", "trust": 1.0, "value": "CRITICAL" }, { "author": "NVD", "id": "CVE-2018-10731", "trust": 0.8, "value": "Critical" }, { "author": "CNVD", "id": "CNVD-2018-14414", "trust": 0.6, "value": "HIGH" }, { "author": "CNNVD", "id": "CNNVD-201805-517", "trust": 0.6, "value": "CRITICAL" } ] } ], "sources": [ { "db": "CNVD", "id": "CNVD-2018-14414" }, { "db": "JVNDB", "id": "JVNDB-2018-005167" }, { "db": "CNNVD", "id": "CNNVD-201805-517" }, { "db": "NVD", "id": "CVE-2018-10731" } ] }, "description": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to buffer overflows when handling very large cookies (a different vulnerability than CVE-2018-10728). plural Phoenix Contact FL SWITCH The product contains a buffer error vulnerability. This vulnerability CVE-2018-10728 Is a different vulnerability.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. PHOENIXCONTACTFLSWITCH3xxx, 4xxx and 48xxxSeries are all different series of switch devices from the Phoenix Contact group in Germany. A stack buffer overflow vulnerability exists in PHOENIXCONTACTFLSWITCH3xxx, 4xxx, and 48xxxSeries products using firmware versions 1.0 through 1.32. A remote attacker could exploit the vulnerability to gain unauthorized access to the switch operating system files and to inject executable code into the operating system. An OS command-execution vulnerability\n2. An information-disclosure vulnerability\n3. Multiple stack-based buffer-overflow vulnerabilities\nAttackers can exploit these issues to execute arbitrary code, execute arbitrary OS commands, obtain sensitive information, and perform unauthorized actions. Failed exploit attempts will likely cause a denial-of-service condition", "sources": [ { "db": "NVD", "id": "CVE-2018-10731" }, { "db": "JVNDB", "id": "JVNDB-2018-005167" }, { "db": "CNVD", "id": "CNVD-2018-14414" }, { "db": "BID", "id": "104231" } ], "trust": 2.43 }, "external_ids": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "db": "NVD", "id": "CVE-2018-10731", "trust": 3.3 }, { "db": "CERT@VDE", "id": "VDE-2018-007", "trust": 2.4 }, { "db": "ICS CERT", "id": "ICSA-18-137-02", "trust": 2.1 }, { "db": "BID", "id": "104231", "trust": 1.9 }, { "db": "JVNDB", "id": "JVNDB-2018-005167", "trust": 0.8 }, { "db": "CNVD", "id": "CNVD-2018-14414", "trust": 0.6 }, { "db": "CNNVD", "id": "CNNVD-201805-517", "trust": 0.6 } ], "sources": [ { "db": "CNVD", "id": "CNVD-2018-14414" }, { "db": "BID", "id": "104231" }, { "db": "JVNDB", "id": "JVNDB-2018-005167" }, { "db": "CNNVD", "id": "CNNVD-201805-517" }, { "db": "NVD", "id": "CVE-2018-10731" } ] }, "id": "VAR-201805-0693", "iot": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": true, "sources": [ { "db": "CNVD", "id": "CNVD-2018-14414" } ], "trust": 1.4020833499999998 }, "iot_taxonomy": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "category": [ "Network device" ], "sub_category": null, "trust": 0.6 } ], "sources": [ { "db": "CNVD", "id": "CNVD-2018-14414" } ] }, "last_update_date": "2024-11-23T22:17:30.214000Z", "patch": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "title": "Top Page", "trust": 0.8, "url": "https://www.phoenixcontact.com/online/portal/pc" }, { "title": "PHOENIX CONTACT FL SWITCH 3xxx , 4xxx and 48xxx Series Buffer error vulnerability fix", "trust": 0.6, "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=83449" } ], "sources": [ { "db": "JVNDB", "id": "JVNDB-2018-005167" }, { "db": "CNNVD", "id": "CNNVD-201805-517" } ] }, "problemtype_data": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "problemtype": "CWE-119", "trust": 1.8 } ], "sources": [ { "db": "JVNDB", "id": "JVNDB-2018-005167" }, { "db": "NVD", "id": "CVE-2018-10731" } ] }, "references": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "trust": 2.4, "url": "https://cert.vde.com/de-de/advisories/vde-2018-007" }, { "trust": 2.1, "url": "https://ics-cert.us-cert.gov/advisories/icsa-18-137-02" }, { "trust": 1.4, "url": "https://nvd.nist.gov/vuln/detail/cve-2018-10731" }, { "trust": 1.0, "url": "http://www.securityfocus.com/bid/104231" }, { "trust": 0.8, "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-10731" }, { "trust": 0.3, "url": "https://www.phoenixcontact.com/online/portal/pc" } ], "sources": [ { "db": "CNVD", "id": "CNVD-2018-14414" }, { "db": "BID", "id": "104231" }, { "db": "JVNDB", "id": "JVNDB-2018-005167" }, { "db": "CNNVD", "id": "CNNVD-201805-517" }, { "db": "NVD", "id": "CVE-2018-10731" } ] }, "sources": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } }, "data": [ { "db": "CNVD", "id": "CNVD-2018-14414" }, { "db": "BID", "id": "104231" }, { "db": "JVNDB", "id": "JVNDB-2018-005167" }, { "db": "CNNVD", "id": "CNNVD-201805-517" }, { "db": "NVD", "id": "CVE-2018-10731" } ] }, "sources_release_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2018-08-01T00:00:00", "db": "CNVD", "id": "CNVD-2018-14414" }, { "date": "2018-05-17T00:00:00", "db": "BID", "id": "104231" }, { "date": "2018-07-09T00:00:00", "db": "JVNDB", "id": "JVNDB-2018-005167" }, { "date": "2018-05-17T00:00:00", "db": "CNNVD", "id": "CNNVD-201805-517" }, { "date": "2018-05-17T19:29:00.447000", "db": "NVD", "id": "CVE-2018-10731" } ] }, "sources_update_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2018-08-01T00:00:00", "db": "CNVD", "id": "CNVD-2018-14414" }, { "date": "2018-05-17T00:00:00", "db": "BID", "id": "104231" }, { "date": "2018-07-09T00:00:00", "db": "JVNDB", "id": "JVNDB-2018-005167" }, { "date": "2018-05-23T00:00:00", "db": "CNNVD", "id": "CNNVD-201805-517" }, { "date": "2024-11-21T03:41:56.613000", "db": "NVD", "id": "CVE-2018-10731" } ] }, "threat_type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "remote", "sources": [ { "db": "CNNVD", "id": "CNNVD-201805-517" } ], "trust": 0.6 }, "title": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "plural Phoenix Contact FL SWITCH Product buffer error vulnerability", "sources": [ { "db": "JVNDB", "id": "JVNDB-2018-005167" } ], "trust": 0.8 }, "type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "buffer overflow", "sources": [ { "db": "CNNVD", "id": "CNNVD-201805-517" } ], "trust": 0.6 } }
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.