VDE-2018-005

Vulnerability from csaf_phoenixcontactgmbhcokg - Published: 2018-05-16 05:35 - Updated: 2018-05-16 05:35
Summary
Phoenix Contact: FL SWITCH 3xxx/4xxx/48xx series through 1.33 allows Information Exposure
Notes
Summary: Web interface CGI applications may copy the contents of the running configuration file to a commonly accessed file. Clever manipulation of a web login request can expose the contents of this file through to the web browser. A successful web interface login attempt is not required to read the configuration file contents. FL SWITCH Configuration File can be read by unauthenticated user.
Impact: FL SWITCH Configuration File can be read by unauthenticated user.
Mitigation: Customers using Phoenix Contact managed FL SWITCH devices with affected firmware versions are recommended to disable the switch Web Agent.
Remediation: Customers using Phoenix Contact managed FL SWITCH devices with affected firmware versions are recommended to update the firmware to version 1.34 which fixes this vulnerability. The updated firmware may be downloaded from the managed switch product page on the Phoenix Contact website: | Article No. | Model | Updated Firmware | |-------------|-----------------------------------|------------------| | 2891030 | FL SWITCH 3005 | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3005-2891030?type=firmware_update&utm_source=qr&utm_medium=print&utm_campaign=product_detection) | | 2891032 | FL SWITCH 3005T | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3005t-2891032?type=firmware_update&utm_source=qr&utm_medium=print&utm_campaign=product_detection) | | 2891033 | FL SWITCH 3004T-FX | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3004t-fx-2891033?type=firmware_update&utm_source=qr&utm_medium=print&utm_campaign=product_detection) | | 2891034 | FL SWITCH 3004T-FX ST | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3004t-fx-st-2891034?type=firmware_update&utm_source=qr&utm_medium=print&utm_campaign=product_detection) | | 2891031 | FL SWITCH 3008 | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3008-2891031?type=firmware_update&utm_source=qr&utm_medium=print&utm_campaign=product_detection) | | 2891035 | FL SWITCH 3008T | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3008t-2891035?type=firmware_update&utm_source=qr&utm_medium=print&utm_campaign=product_detection) | | 2891036 | FL SWITCH 3006T-2FX | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3006t-2fx-2891036?type=firmware_update&utm_source=qr&utm_medium=print&utm_campaign=product_detection) | | 2891037 | FL SWITCH 3006T-2FX ST | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3006t-2fx-st-2891037?type=firmware_update&utm_source=qr&utm_medium=print&utm_campaign=product_detection) | | 2891067 | FL SWITCH 3012E-2SFX | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3012e-2sfx-2891067?type=firmware_update&utm_source=qr&utm_medium=print&utm_campaign=product_detection) | | 2891066 | FL SWITCH 3016E | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3016e-2891066?type=firmware_update&utm_source=qr&utm_medium=print&utm_campaign=product_detection) | | 2891058 | FL SWITCH 3016 | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3016-2891058?type=firmware_update&utm_source=qr&utm_medium=print&utm_campaign=product_detection) | | 2891059 | FL SWITCH 3016T | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3016t-2891059?type=firmware_update&utm_source=qr&utm_medium=print&utm_campaign=product_detection) | | 2891060 | FL SWITCH 3006T-2FX SM | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3006t-2fx-sm-2891060?type=firmware_update&utm_source=qr&utm_medium=print&utm_campaign=product_detection) | | 2891062 | FL SWITCH 4008T-2SFP | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4008t-2sfp-2891062?type=firmware_update&utm_source=qr&utm_medium=print&utm_campaign=product_detection) | | 2891061 | FL SWITCH 4008T-2GT-4FX SM | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4008t-2gt-4fx-sm-2891061?type=firmware_update&utm_source=qr&utm_medium=print&utm_campaign=product_detection) | | 2891160 | FL SWITCH 4008T-2GT-3FX SM | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4008t-2gt-3fx-sm-2891160?type=firmware_update&utm_source=qr&utm_medium=print&utm_campaign=product_detection) | | 2891073 | FL SWITCH 4808E-16FX LC-4GC | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4808e-16fx-lc-4gc-2891073?type=firmware_update&utm_source=qr&utm_medium=print&utm_campaign=product_detection) | | 2891080 | FL SWITCH 4808E-16FX SM-4GC | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4808e-16fx-sm-4gc-2891080?type=firmware_update&utm_source=qr&utm_medium=print&utm_campaign=product_detection) | | 2891086 | FL SWITCH 4808E-16FX SM ST-4GC | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4808e-16fx-sm-st-4gc-2891086?type=firmware_update&utm_source=qr&utm_medium=print&utm_campaign=product_detection) | | 2891085 | FL SWITCH 4808E-16FX ST-4GC | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4808e-16fx-st-4gc-2891085?type=firmware_update&utm_source=qr&utm_medium=print&utm_campaign=product_detection) | | 2891079 | FL SWITCH 4808E-16FX-4GC | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4808e-16fx-4gc-2891079?type=firmware_update&utm_source=qr&utm_medium=print&utm_campaign=product_detection) | | 2891074 | FL SWITCH 4808E-16FX SM LC-4GC | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4808e-16fx-sm-lc-4gc-2891074?type=firmware_update&utm_source=qr&utm_medium=print&utm_campaign=product_detection) | | 2891063 | FL SWITCH 4012T 2GT 2FX | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4012t-2gt-2fx-2891063?type=firmware_update&utm_source=qr&utm_medium=print&utm_campaign=product_detection) | | 2891161 | FL SWITCH 4012T-2GT-2FX ST | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4012t-2gt-2fx-st-2891161?type=firmware_update&utm_source=qr&utm_medium=print&utm_campaign=product_detection) | | 2891072 | FL SWITCH 4824E-4GC | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4824e-4gc-2891072?type=firmware_update&utm_source=qr&utm_medium=print&utm_campaign=product_detection) | | 2891102 | FL SWITCH 4800E-24FX-4GC | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4800e-24fx-4gc-2891102?type=firmware_update&utm_source=qr&utm_medium=print&utm_campaign=product_detection) | | 2891104 | FL SWITCH 4800E-24FX SM-4GC | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4800e-24fx-sm-4gc-2891104?type=firmware_update&utm_source=qr&utm_medium=print&utm_campaign=product_detection) | | 2891120 | FL SWITCH 3012E-2FX | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3012e-2fx-2891120?type=firmware_update&utm_source=qr&utm_medium=print&utm_campaign=product_detection) | | 2891119 | FL SWITCH 3012E-2FX SM | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3012e-2fx-sm-2891119?type=firmware_update&utm_source=qr&utm_medium=print&utm_campaign=product_detection) | | 2891162 | FL SWITCH 4000T-8POE-2SFP-R | please contact your local customer service |

All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 allow reading the configuration file by an unauthenticated user.

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor
Mitigation Customers using Phoenix Contact managed FL SWITCH devices with affected firmware versions are recommended to disable the switch Web Agent.
Vendor Fix Customers using Phoenix Contact managed FL SWITCH devices with affected firmware versions are recommended to update the firmware to version 1.34 which fixes this vulnerability. The updated firmware may be downloaded from the managed switch product page on the Phoenix Contact website: | Article No. | Model | Updated Firmware | |-------------|-----------------------------------|------------------| | 2891030 | FL SWITCH 3005 | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3005-2891030?type=firmware_update&utm_source=qr&utm_medium=print&utm_campaign=product_detection) | | 2891032 | FL SWITCH 3005T | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3005t-2891032?type=firmware_update&utm_source=qr&utm_medium=print&utm_campaign=product_detection) | | 2891033 | FL SWITCH 3004T-FX | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3004t-fx-2891033?type=firmware_update&utm_source=qr&utm_medium=print&utm_campaign=product_detection) | | 2891034 | FL SWITCH 3004T-FX ST | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3004t-fx-st-2891034?type=firmware_update&utm_source=qr&utm_medium=print&utm_campaign=product_detection) | | 2891031 | FL SWITCH 3008 | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3008-2891031?type=firmware_update&utm_source=qr&utm_medium=print&utm_campaign=product_detection) | | 2891035 | FL SWITCH 3008T | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3008t-2891035?type=firmware_update&utm_source=qr&utm_medium=print&utm_campaign=product_detection) | | 2891036 | FL SWITCH 3006T-2FX | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3006t-2fx-2891036?type=firmware_update&utm_source=qr&utm_medium=print&utm_campaign=product_detection) | | 2891037 | FL SWITCH 3006T-2FX ST | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3006t-2fx-st-2891037?type=firmware_update&utm_source=qr&utm_medium=print&utm_campaign=product_detection) | | 2891067 | FL SWITCH 3012E-2SFX | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3012e-2sfx-2891067?type=firmware_update&utm_source=qr&utm_medium=print&utm_campaign=product_detection) | | 2891066 | FL SWITCH 3016E | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3016e-2891066?type=firmware_update&utm_source=qr&utm_medium=print&utm_campaign=product_detection) | | 2891058 | FL SWITCH 3016 | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3016-2891058?type=firmware_update&utm_source=qr&utm_medium=print&utm_campaign=product_detection) | | 2891059 | FL SWITCH 3016T | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3016t-2891059?type=firmware_update&utm_source=qr&utm_medium=print&utm_campaign=product_detection) | | 2891060 | FL SWITCH 3006T-2FX SM | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3006t-2fx-sm-2891060?type=firmware_update&utm_source=qr&utm_medium=print&utm_campaign=product_detection) | | 2891062 | FL SWITCH 4008T-2SFP | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4008t-2sfp-2891062?type=firmware_update&utm_source=qr&utm_medium=print&utm_campaign=product_detection) | | 2891061 | FL SWITCH 4008T-2GT-4FX SM | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4008t-2gt-4fx-sm-2891061?type=firmware_update&utm_source=qr&utm_medium=print&utm_campaign=product_detection) | | 2891160 | FL SWITCH 4008T-2GT-3FX SM | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4008t-2gt-3fx-sm-2891160?type=firmware_update&utm_source=qr&utm_medium=print&utm_campaign=product_detection) | | 2891073 | FL SWITCH 4808E-16FX LC-4GC | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4808e-16fx-lc-4gc-2891073?type=firmware_update&utm_source=qr&utm_medium=print&utm_campaign=product_detection) | | 2891080 | FL SWITCH 4808E-16FX SM-4GC | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4808e-16fx-sm-4gc-2891080?type=firmware_update&utm_source=qr&utm_medium=print&utm_campaign=product_detection) | | 2891086 | FL SWITCH 4808E-16FX SM ST-4GC | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4808e-16fx-sm-st-4gc-2891086?type=firmware_update&utm_source=qr&utm_medium=print&utm_campaign=product_detection) | | 2891085 | FL SWITCH 4808E-16FX ST-4GC | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4808e-16fx-st-4gc-2891085?type=firmware_update&utm_source=qr&utm_medium=print&utm_campaign=product_detection) | | 2891079 | FL SWITCH 4808E-16FX-4GC | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4808e-16fx-4gc-2891079?type=firmware_update&utm_source=qr&utm_medium=print&utm_campaign=product_detection) | | 2891074 | FL SWITCH 4808E-16FX SM LC-4GC | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4808e-16fx-sm-lc-4gc-2891074?type=firmware_update&utm_source=qr&utm_medium=print&utm_campaign=product_detection) | | 2891063 | FL SWITCH 4012T 2GT 2FX | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4012t-2gt-2fx-2891063?type=firmware_update&utm_source=qr&utm_medium=print&utm_campaign=product_detection) | | 2891161 | FL SWITCH 4012T-2GT-2FX ST | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4012t-2gt-2fx-st-2891161?type=firmware_update&utm_source=qr&utm_medium=print&utm_campaign=product_detection) | | 2891072 | FL SWITCH 4824E-4GC | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4824e-4gc-2891072?type=firmware_update&utm_source=qr&utm_medium=print&utm_campaign=product_detection) | | 2891102 | FL SWITCH 4800E-24FX-4GC | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4800e-24fx-4gc-2891102?type=firmware_update&utm_source=qr&utm_medium=print&utm_campaign=product_detection) | | 2891104 | FL SWITCH 4800E-24FX SM-4GC | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4800e-24fx-sm-4gc-2891104?type=firmware_update&utm_source=qr&utm_medium=print&utm_campaign=product_detection) | | 2891120 | FL SWITCH 3012E-2FX | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3012e-2fx-2891120?type=firmware_update&utm_source=qr&utm_medium=print&utm_campaign=product_detection) | | 2891119 | FL SWITCH 3012E-2FX SM | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3012e-2fx-sm-2891119?type=firmware_update&utm_source=qr&utm_medium=print&utm_campaign=product_detection) | | 2891162 | FL SWITCH 4000T-8POE-2SFP-R | please contact your local customer service |
Affected products
Product Identifier Version Remediation
Unresolved product id: CSAFPID-32001
Unresolved product id: CSAFPID-32002
Unresolved product id: CSAFPID-32003
Unresolved product id: CSAFPID-32004
Unresolved product id: CSAFPID-32005
Unresolved product id: CSAFPID-32006
Unresolved product id: CSAFPID-32007
Unresolved product id: CSAFPID-32008
Unresolved product id: CSAFPID-32009
Unresolved product id: CSAFPID-32010
Unresolved product id: CSAFPID-32011
Unresolved product id: CSAFPID-32012
Unresolved product id: CSAFPID-32013
Unresolved product id: CSAFPID-32014
Unresolved product id: CSAFPID-32015
Unresolved product id: CSAFPID-32016
Unresolved product id: CSAFPID-32017
Unresolved product id: CSAFPID-32018
Unresolved product id: CSAFPID-32019
Unresolved product id: CSAFPID-32020
Unresolved product id: CSAFPID-32021
Unresolved product id: CSAFPID-32022
Unresolved product id: CSAFPID-32023
Unresolved product id: CSAFPID-32024
Unresolved product id: CSAFPID-32025
Unresolved product id: CSAFPID-32026
Unresolved product id: CSAFPID-32027
Unresolved product id: CSAFPID-32028
Unresolved product id: CSAFPID-32029
Unresolved product id: CSAFPID-32030
Product Identifier Version Remediation
Unresolved product id: CSAFPID-31001
Unresolved product id: CSAFPID-31002
Unresolved product id: CSAFPID-31003
Unresolved product id: CSAFPID-31004
Unresolved product id: CSAFPID-31005
Unresolved product id: CSAFPID-31006
Unresolved product id: CSAFPID-31007
Unresolved product id: CSAFPID-31008
Unresolved product id: CSAFPID-31009
Unresolved product id: CSAFPID-31010
Unresolved product id: CSAFPID-31011
Unresolved product id: CSAFPID-31012
Unresolved product id: CSAFPID-31013
Unresolved product id: CSAFPID-31014
Unresolved product id: CSAFPID-31015
Unresolved product id: CSAFPID-31016
Unresolved product id: CSAFPID-31017
Unresolved product id: CSAFPID-31018
Unresolved product id: CSAFPID-31019
Unresolved product id: CSAFPID-31020
Unresolved product id: CSAFPID-31021
Unresolved product id: CSAFPID-31022
Unresolved product id: CSAFPID-31023
Unresolved product id: CSAFPID-31024
Unresolved product id: CSAFPID-31025
Unresolved product id: CSAFPID-31026
Unresolved product id: CSAFPID-31027
Unresolved product id: CSAFPID-31028
Unresolved product id: CSAFPID-31029
Unresolved product id: CSAFPID-31030
Acknowledgments
CERT@VDE certvde.com
Positive Technologies Semen Sokolov

{
  "document": {
    "acknowledgments": [
      {
        "organization": "CERT@VDE",
        "summary": "coordination",
        "urls": [
          "https://certvde.com"
        ]
      },
      {
        "names": [
          "Semen Sokolov"
        ],
        "organization": "Positive Technologies",
        "summary": "reporting"
      }
    ],
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-GB",
    "notes": [
      {
        "category": "summary",
        "text": "Web interface CGI applications may copy the contents of the running configuration file to a commonly accessed file. Clever manipulation of a web login request can expose the contents of this file through to the web browser. A successful web interface login attempt is not required to read the configuration file contents.\n\n\n\nFL SWITCH Configuration File can be read by unauthenticated user.",
        "title": "Summary"
      },
      {
        "category": "description",
        "text": "FL SWITCH Configuration File can be read by unauthenticated user.",
        "title": "Impact"
      },
      {
        "category": "description",
        "text": "Customers using Phoenix Contact managed FL SWITCH devices with affected firmware versions are recommended to disable the switch Web Agent.",
        "title": "Mitigation"
      },
      {
        "category": "description",
        "text": "Customers using Phoenix Contact managed FL SWITCH devices with affected firmware versions are recommended to update the firmware to version 1.34 which fixes this vulnerability. The updated firmware may be downloaded from the managed switch product page on the Phoenix Contact website:\n\n| Article No. | Model                             | Updated Firmware |\n|-------------|-----------------------------------|------------------|\n| 2891030     | FL SWITCH 3005                    | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3005-2891030?type=firmware_update\u0026utm_source=qr\u0026utm_medium=print\u0026utm_campaign=product_detection) |\n| 2891032     | FL SWITCH 3005T                   | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3005t-2891032?type=firmware_update\u0026utm_source=qr\u0026utm_medium=print\u0026utm_campaign=product_detection) |\n| 2891033     | FL SWITCH 3004T-FX                | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3004t-fx-2891033?type=firmware_update\u0026utm_source=qr\u0026utm_medium=print\u0026utm_campaign=product_detection) |\n| 2891034     | FL SWITCH 3004T-FX ST             | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3004t-fx-st-2891034?type=firmware_update\u0026utm_source=qr\u0026utm_medium=print\u0026utm_campaign=product_detection) |\n| 2891031     | FL SWITCH 3008                    | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3008-2891031?type=firmware_update\u0026utm_source=qr\u0026utm_medium=print\u0026utm_campaign=product_detection) |\n| 2891035     | FL SWITCH 3008T                   | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3008t-2891035?type=firmware_update\u0026utm_source=qr\u0026utm_medium=print\u0026utm_campaign=product_detection) |\n| 2891036     | FL SWITCH 3006T-2FX               | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3006t-2fx-2891036?type=firmware_update\u0026utm_source=qr\u0026utm_medium=print\u0026utm_campaign=product_detection) |\n| 2891037     | FL SWITCH 3006T-2FX ST            | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3006t-2fx-st-2891037?type=firmware_update\u0026utm_source=qr\u0026utm_medium=print\u0026utm_campaign=product_detection) |\n| 2891067     | FL SWITCH 3012E-2SFX              | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3012e-2sfx-2891067?type=firmware_update\u0026utm_source=qr\u0026utm_medium=print\u0026utm_campaign=product_detection) |\n| 2891066     | FL SWITCH 3016E                   | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3016e-2891066?type=firmware_update\u0026utm_source=qr\u0026utm_medium=print\u0026utm_campaign=product_detection) |\n| 2891058     | FL SWITCH 3016                    | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3016-2891058?type=firmware_update\u0026utm_source=qr\u0026utm_medium=print\u0026utm_campaign=product_detection) |\n| 2891059     | FL SWITCH 3016T                   | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3016t-2891059?type=firmware_update\u0026utm_source=qr\u0026utm_medium=print\u0026utm_campaign=product_detection) |\n| 2891060     | FL SWITCH 3006T-2FX SM            | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3006t-2fx-sm-2891060?type=firmware_update\u0026utm_source=qr\u0026utm_medium=print\u0026utm_campaign=product_detection) |\n| 2891062     | FL SWITCH 4008T-2SFP              | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4008t-2sfp-2891062?type=firmware_update\u0026utm_source=qr\u0026utm_medium=print\u0026utm_campaign=product_detection) |\n| 2891061     | FL SWITCH 4008T-2GT-4FX SM        | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4008t-2gt-4fx-sm-2891061?type=firmware_update\u0026utm_source=qr\u0026utm_medium=print\u0026utm_campaign=product_detection) |\n| 2891160     | FL SWITCH 4008T-2GT-3FX SM        | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4008t-2gt-3fx-sm-2891160?type=firmware_update\u0026utm_source=qr\u0026utm_medium=print\u0026utm_campaign=product_detection) |\n| 2891073     | FL SWITCH 4808E-16FX LC-4GC       | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4808e-16fx-lc-4gc-2891073?type=firmware_update\u0026utm_source=qr\u0026utm_medium=print\u0026utm_campaign=product_detection) |\n| 2891080     | FL SWITCH 4808E-16FX SM-4GC       | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4808e-16fx-sm-4gc-2891080?type=firmware_update\u0026utm_source=qr\u0026utm_medium=print\u0026utm_campaign=product_detection) |\n| 2891086     | FL SWITCH 4808E-16FX SM ST-4GC    | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4808e-16fx-sm-st-4gc-2891086?type=firmware_update\u0026utm_source=qr\u0026utm_medium=print\u0026utm_campaign=product_detection) |\n| 2891085     | FL SWITCH 4808E-16FX ST-4GC       | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4808e-16fx-st-4gc-2891085?type=firmware_update\u0026utm_source=qr\u0026utm_medium=print\u0026utm_campaign=product_detection) |\n| 2891079     | FL SWITCH 4808E-16FX-4GC          | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4808e-16fx-4gc-2891079?type=firmware_update\u0026utm_source=qr\u0026utm_medium=print\u0026utm_campaign=product_detection) |\n| 2891074     | FL SWITCH 4808E-16FX SM LC-4GC    | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4808e-16fx-sm-lc-4gc-2891074?type=firmware_update\u0026utm_source=qr\u0026utm_medium=print\u0026utm_campaign=product_detection) |\n| 2891063     | FL SWITCH 4012T 2GT 2FX           | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4012t-2gt-2fx-2891063?type=firmware_update\u0026utm_source=qr\u0026utm_medium=print\u0026utm_campaign=product_detection) |\n| 2891161     | FL SWITCH 4012T-2GT-2FX ST        | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4012t-2gt-2fx-st-2891161?type=firmware_update\u0026utm_source=qr\u0026utm_medium=print\u0026utm_campaign=product_detection) |\n| 2891072     | FL SWITCH 4824E-4GC               | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4824e-4gc-2891072?type=firmware_update\u0026utm_source=qr\u0026utm_medium=print\u0026utm_campaign=product_detection) |\n| 2891102     | FL SWITCH 4800E-24FX-4GC          | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4800e-24fx-4gc-2891102?type=firmware_update\u0026utm_source=qr\u0026utm_medium=print\u0026utm_campaign=product_detection) |\n| 2891104     | FL SWITCH 4800E-24FX SM-4GC       | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4800e-24fx-sm-4gc-2891104?type=firmware_update\u0026utm_source=qr\u0026utm_medium=print\u0026utm_campaign=product_detection) |\n| 2891120     | FL SWITCH 3012E-2FX               | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3012e-2fx-2891120?type=firmware_update\u0026utm_source=qr\u0026utm_medium=print\u0026utm_campaign=product_detection) |\n| 2891119     | FL SWITCH 3012E-2FX SM            | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3012e-2fx-sm-2891119?type=firmware_update\u0026utm_source=qr\u0026utm_medium=print\u0026utm_campaign=product_detection) |\n| 2891162     | FL SWITCH 4000T-8POE-2SFP-R       | please contact your local customer service |",
        "title": "Remediation"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "psirt@phoenixcontact.com",
      "name": "Phoenix Contact GmbH \u0026 Co. KG",
      "namespace": "https://phoenixcontact.com/psirt"
    },
    "references": [
      {
        "category": "self",
        "summary": "VDE-2018-005: Phoenix Contact: FL SWITCH 3xxx/4xxx/48xx series through 1.33 allows Information Exposure - HTML",
        "url": "https://certvde.com/en/advisories/VDE-2018-005/"
      },
      {
        "category": "self",
        "summary": "VDE-2018-005: Phoenix Contact: FL SWITCH 3xxx/4xxx/48xx series through 1.33 allows Information Exposure - CSAF",
        "url": "https://phoenixcontact.csaf-tp.certvde.com/.well-known/csaf/white/2018/vde-2018-005.json"
      },
      {
        "category": "external",
        "summary": "Vendor PSIRT",
        "url": "https://phoenixcontact.com/psirt"
      },
      {
        "category": "external",
        "summary": "CERT@VDE Security Advisories for Phoenix Contact GmbH \u0026 Co. KG",
        "url": "https://certvde.com/en/advisories/vendor/phoenixcontact/"
      }
    ],
    "title": "Phoenix Contact: FL SWITCH 3xxx/4xxx/48xx series through 1.33 allows Information Exposure",
    "tracking": {
      "aliases": [
        "VDE-2018-005"
      ],
      "current_release_date": "2018-05-16T05:35:00.000Z",
      "generator": {
        "date": "2025-04-23T08:11:41.540Z",
        "engine": {
          "name": "Secvisogram",
          "version": "2.5.23"
        }
      },
      "id": "VDE-2018-005",
      "initial_release_date": "2018-05-16T05:35:00.000Z",
      "revision_history": [
        {
          "date": "2018-05-16T05:35:00.000Z",
          "number": "1",
          "summary": "Initial revision."
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "FL SWITCH 3004T-FX",
                "product": {
                  "name": "FL SWITCH 3004T-FX",
                  "product_id": "CSAFPID-11001",
                  "product_identification_helper": {
                    "model_numbers": [
                      "2891033"
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "FL SWITCH 3004T-FX ST",
                "product": {
                  "name": "FL SWITCH 3004T-FX ST",
                  "product_id": "CSAFPID-11002",
                  "product_identification_helper": {
                    "model_numbers": [
                      "2891034"
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "FL SWITCH 3005",
                "product": {
                  "name": "FL SWITCH 3005",
                  "product_id": "CSAFPID-11003",
                  "product_identification_helper": {
                    "model_numbers": [
                      "2891030"
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "FL SWITCH 3005T",
                "product": {
                  "name": "FL SWITCH 3005T",
                  "product_id": "CSAFPID-11004",
                  "product_identification_helper": {
                    "model_numbers": [
                      "2891032"
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "FL SWITCH 3006T-2FX",
                "product": {
                  "name": "FL SWITCH 3006T-2FX",
                  "product_id": "CSAFPID-11005",
                  "product_identification_helper": {
                    "model_numbers": [
                      "2891036"
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "FL SWITCH 3006T-2FX SM",
                "product": {
                  "name": "FL SWITCH 3006T-2FX SM",
                  "product_id": "CSAFPID-11006",
                  "product_identification_helper": {
                    "model_numbers": [
                      "2891060"
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "FL SWITCH 3006T-2FX ST",
                "product": {
                  "name": "FL SWITCH 3006T-2FX ST",
                  "product_id": "CSAFPID-11007",
                  "product_identification_helper": {
                    "model_numbers": [
                      "2891037"
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "FL SWITCH 3008",
                "product": {
                  "name": "FL SWITCH 3008",
                  "product_id": "CSAFPID-11008",
                  "product_identification_helper": {
                    "model_numbers": [
                      "2891031"
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "FL SWITCH 3008T",
                "product": {
                  "name": "FL SWITCH 3008T",
                  "product_id": "CSAFPID-11009",
                  "product_identification_helper": {
                    "model_numbers": [
                      "2891035"
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "FL SWITCH 3012E-2FX",
                "product": {
                  "name": "FL SWITCH 3012E-2FX",
                  "product_id": "CSAFPID-11010",
                  "product_identification_helper": {
                    "model_numbers": [
                      "2891120"
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "FL SWITCH 3012E-2FX SM",
                "product": {
                  "name": "FL SWITCH 3012E-2FX SM",
                  "product_id": "CSAFPID-11011",
                  "product_identification_helper": {
                    "model_numbers": [
                      "2891119"
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "FL SWITCH 3012E-2SFX",
                "product": {
                  "name": "FL SWITCH 3012E-2SFX",
                  "product_id": "CSAFPID-11012",
                  "product_identification_helper": {
                    "model_numbers": [
                      "2891067"
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "FL SWITCH 3016",
                "product": {
                  "name": "FL SWITCH 3016",
                  "product_id": "CSAFPID-11013",
                  "product_identification_helper": {
                    "model_numbers": [
                      "2891058"
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "FL SWITCH 3016E",
                "product": {
                  "name": "FL SWITCH 3016E",
                  "product_id": "CSAFPID-11014",
                  "product_identification_helper": {
                    "model_numbers": [
                      "2891066"
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "FL SWITCH 3016T",
                "product": {
                  "name": "FL SWITCH 3016T",
                  "product_id": "CSAFPID-11015",
                  "product_identification_helper": {
                    "model_numbers": [
                      "2891059"
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "FL SWITCH 4000T-8POE-2SFP-R",
                "product": {
                  "name": "FL SWITCH 4000T-8POE-2SFP-R",
                  "product_id": "CSAFPID-11016",
                  "product_identification_helper": {
                    "model_numbers": [
                      "2891162"
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "FL SWITCH 4008T-2GT-3FX SM",
                "product": {
                  "name": "FL SWITCH 4008T-2GT-3FX SM",
                  "product_id": "CSAFPID-11017",
                  "product_identification_helper": {
                    "model_numbers": [
                      "2891160"
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "FL SWITCH 4008T-2GT-4FX SM",
                "product": {
                  "name": "FL SWITCH 4008T-2GT-4FX SM",
                  "product_id": "CSAFPID-11018",
                  "product_identification_helper": {
                    "model_numbers": [
                      "2891061"
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "FL SWITCH 4008T-2SFP",
                "product": {
                  "name": "FL SWITCH 4008T-2SFP",
                  "product_id": "CSAFPID-11019",
                  "product_identification_helper": {
                    "model_numbers": [
                      "2891062"
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "FL SWITCH 4012T 2GT 2FX",
                "product": {
                  "name": "FL SWITCH 4012T 2GT 2FX",
                  "product_id": "CSAFPID-11020",
                  "product_identification_helper": {
                    "model_numbers": [
                      "2891063"
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "FL SWITCH 4012T-2GT-2FX ST",
                "product": {
                  "name": "FL SWITCH 4012T-2GT-2FX ST",
                  "product_id": "CSAFPID-11021",
                  "product_identification_helper": {
                    "model_numbers": [
                      "2891161"
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "FL SWITCH 4800E-24FX-4GC",
                "product": {
                  "name": "FL SWITCH 4800E-24FX-4GC",
                  "product_id": "CSAFPID-11022",
                  "product_identification_helper": {
                    "model_numbers": [
                      "2891102"
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "FL SWITCH 4800E-24FX SM-4GC",
                "product": {
                  "name": "FL SWITCH 4800E-24FX SM-4GC",
                  "product_id": "CSAFPID-11023",
                  "product_identification_helper": {
                    "model_numbers": [
                      "2891104"
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "FL SWITCH 4808E-16FX-4GC",
                "product": {
                  "name": "FL SWITCH 4808E-16FX-4GC",
                  "product_id": "CSAFPID-11024",
                  "product_identification_helper": {
                    "model_numbers": [
                      "2891079"
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "FL SWITCH 4808E-16FX LC-4GC",
                "product": {
                  "name": "FL SWITCH 4808E-16FX LC-4GC",
                  "product_id": "CSAFPID-11025",
                  "product_identification_helper": {
                    "model_numbers": [
                      "2891073"
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "FL SWITCH 4808E-16FX SM-4GC",
                "product": {
                  "name": "FL SWITCH 4808E-16FX SM-4GC",
                  "product_id": "CSAFPID-11026",
                  "product_identification_helper": {
                    "model_numbers": [
                      "2891080"
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "FL SWITCH 4808E-16FX SM LC-4GC",
                "product": {
                  "name": "FL SWITCH 4808E-16FX SM LC-4GC",
                  "product_id": "CSAFPID-11027",
                  "product_identification_helper": {
                    "model_numbers": [
                      "2891074"
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "FL SWITCH 4808E-16FX SM ST-4GC",
                "product": {
                  "name": "FL SWITCH 4808E-16FX SM ST-4GC",
                  "product_id": "CSAFPID-11028",
                  "product_identification_helper": {
                    "model_numbers": [
                      "2891086"
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "FL SWITCH 4808E-16FX ST-4GC",
                "product": {
                  "name": "FL SWITCH 4808E-16FX ST-4GC",
                  "product_id": "CSAFPID-11029",
                  "product_identification_helper": {
                    "model_numbers": [
                      "2891085"
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "FL SWITCH 4824E-4GC",
                "product": {
                  "name": "FL SWITCH 4824E-4GC",
                  "product_id": "CSAFPID-11030",
                  "product_identification_helper": {
                    "model_numbers": [
                      "2891072"
                    ]
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Hardware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "1.0\u003c=1.33",
                "product": {
                  "name": "Firmware 1.0\u003c=1.33",
                  "product_id": "CSAFPID-21001"
                }
              },
              {
                "category": "product_version",
                "name": "1.34",
                "product": {
                  "name": "Firmware 1.34",
                  "product_id": "CSAFPID-22001"
                }
              }
            ],
            "category": "product_family",
            "name": "Firmware"
          }
        ],
        "category": "vendor",
        "name": "Phoenix Contact"
      }
    ],
    "product_groups": [
      {
        "group_id": "CSAFGID-0001",
        "product_ids": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004",
          "CSAFPID-31005",
          "CSAFPID-31006",
          "CSAFPID-31007",
          "CSAFPID-31008",
          "CSAFPID-31009",
          "CSAFPID-31010",
          "CSAFPID-31011",
          "CSAFPID-31012",
          "CSAFPID-31013",
          "CSAFPID-31014",
          "CSAFPID-31015",
          "CSAFPID-31016",
          "CSAFPID-31017",
          "CSAFPID-31018",
          "CSAFPID-31019",
          "CSAFPID-31020",
          "CSAFPID-31021",
          "CSAFPID-31022",
          "CSAFPID-31023",
          "CSAFPID-31024",
          "CSAFPID-31025",
          "CSAFPID-31026",
          "CSAFPID-31027",
          "CSAFPID-31028",
          "CSAFPID-31029",
          "CSAFPID-31030"
        ],
        "summary": "Affected products."
      },
      {
        "group_id": "CSAFGID-0002",
        "product_ids": [
          "CSAFPID-32001",
          "CSAFPID-32002",
          "CSAFPID-32003",
          "CSAFPID-32004",
          "CSAFPID-32005",
          "CSAFPID-32006",
          "CSAFPID-32007",
          "CSAFPID-32008",
          "CSAFPID-32009",
          "CSAFPID-32010",
          "CSAFPID-32011",
          "CSAFPID-32012",
          "CSAFPID-32013",
          "CSAFPID-32014",
          "CSAFPID-32015",
          "CSAFPID-32016",
          "CSAFPID-32017",
          "CSAFPID-32018",
          "CSAFPID-32019",
          "CSAFPID-32020",
          "CSAFPID-32021",
          "CSAFPID-32022",
          "CSAFPID-32023",
          "CSAFPID-32024",
          "CSAFPID-32025",
          "CSAFPID-32026",
          "CSAFPID-32027",
          "CSAFPID-32028",
          "CSAFPID-32029",
          "CSAFPID-32030"
        ],
        "summary": "Fixed products."
      }
    ],
    "relationships": [
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.0\u003c=1.33 installed on FL SWITCH 3004T-FX",
          "product_id": "CSAFPID-31001"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11001"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.0\u003c=1.33 installed on FL SWITCH 3004T-FX ST",
          "product_id": "CSAFPID-31002"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11002"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.0\u003c=1.33 installed on FL SWITCH 3005",
          "product_id": "CSAFPID-31003"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11003"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.0\u003c=1.33 installed on FL SWITCH 3005T",
          "product_id": "CSAFPID-31004"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11004"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.0\u003c=1.33 installed on FL SWITCH 3006T-2FX",
          "product_id": "CSAFPID-31005"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11005"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.0\u003c=1.33 installed on FL SWITCH 3006T-2FX SM",
          "product_id": "CSAFPID-31006"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11006"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.0\u003c=1.33 installed on FL SWITCH 3006T-2FX ST",
          "product_id": "CSAFPID-31007"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11007"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.0\u003c=1.33 installed on FL SWITCH 3008",
          "product_id": "CSAFPID-31008"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11008"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.0\u003c=1.33 installed on FL SWITCH 3008T",
          "product_id": "CSAFPID-31009"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11009"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.0\u003c=1.33 installed on FL SWITCH 3012E-2FX",
          "product_id": "CSAFPID-31010"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11010"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.0\u003c=1.33 installed on FL SWITCH 3012E-2FX SM",
          "product_id": "CSAFPID-31011"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11011"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.0\u003c=1.33 installed on FL SWITCH 3012E-2SFX",
          "product_id": "CSAFPID-31012"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11012"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.0\u003c=1.33 installed on FL SWITCH 3016",
          "product_id": "CSAFPID-31013"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11013"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.0\u003c=1.33 installed on FL SWITCH 3016E",
          "product_id": "CSAFPID-31014"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11014"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.0\u003c=1.33 installed on FL SWITCH 3016T",
          "product_id": "CSAFPID-31015"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11015"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.0\u003c=1.33 installed on FL SWITCH 4000T-8POE-2SFP-R",
          "product_id": "CSAFPID-31016"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11016"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.0\u003c=1.33 installed on FL SWITCH 4008T-2GT-3FX SM",
          "product_id": "CSAFPID-31017"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11017"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.0\u003c=1.33 installed on FL SWITCH 4008T-2GT-4FX SM",
          "product_id": "CSAFPID-31018"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11018"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.0\u003c=1.33 installed on FL SWITCH 4008T-2SFP",
          "product_id": "CSAFPID-31019"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11019"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.0\u003c=1.33 installed on FL SWITCH 4012T 2GT 2FX",
          "product_id": "CSAFPID-31020"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11020"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.0\u003c=1.33 installed on FL SWITCH 4012T-2GT-2FX ST",
          "product_id": "CSAFPID-31021"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11021"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.0\u003c=1.33 installed on FL SWITCH 4800E-24FX-4GC",
          "product_id": "CSAFPID-31022"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11022"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.0\u003c=1.33 installed on FL SWITCH 4800E-24FX SM-4GC",
          "product_id": "CSAFPID-31023"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11023"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.0\u003c=1.33 installed on FL SWITCH 4808E-16FX-4GC",
          "product_id": "CSAFPID-31024"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11024"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.0\u003c=1.33 installed on FL SWITCH 4808E-16FX LC-4GC",
          "product_id": "CSAFPID-31025"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11025"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.0\u003c=1.33 installed on FL SWITCH 4808E-16FX SM-4GC",
          "product_id": "CSAFPID-31026"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11026"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.0\u003c=1.33 installed on FL SWITCH 4808E-16FX SM LC-4GC",
          "product_id": "CSAFPID-31027"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11027"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.0\u003c=1.33 installed on FL SWITCH 4808E-16FX SM ST-4GC",
          "product_id": "CSAFPID-31028"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11028"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.0\u003c=1.33 installed on FL SWITCH 4808E-16FX ST-4GC",
          "product_id": "CSAFPID-31029"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11029"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.0\u003c=1.33 installed on FL SWITCH 4824E-4GC",
          "product_id": "CSAFPID-31030"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11030"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.34 installed on FL SWITCH 3004T-FX",
          "product_id": "CSAFPID-32001"
        },
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11001"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.34 installed on FL SWITCH 3004T-FX ST",
          "product_id": "CSAFPID-32002"
        },
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11002"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.34 installed on FL SWITCH 3005",
          "product_id": "CSAFPID-32003"
        },
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11003"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.34 installed on FL SWITCH 3005T",
          "product_id": "CSAFPID-32004"
        },
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11004"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.34 installed on FL SWITCH 3006T-2FX",
          "product_id": "CSAFPID-32005"
        },
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11005"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.34 installed on FL SWITCH 3006T-2FX SM",
          "product_id": "CSAFPID-32006"
        },
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11006"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.34 installed on FL SWITCH 3006T-2FX ST",
          "product_id": "CSAFPID-32007"
        },
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11007"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.34 installed on FL SWITCH 3008",
          "product_id": "CSAFPID-32008"
        },
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11008"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.34 installed on FL SWITCH 3008T",
          "product_id": "CSAFPID-32009"
        },
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11009"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.34 installed on FL SWITCH 3012E-2FX",
          "product_id": "CSAFPID-32010"
        },
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11010"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.34 installed on FL SWITCH 3012E-2FX SM",
          "product_id": "CSAFPID-32011"
        },
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11011"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.34 installed on FL SWITCH 3012E-2SFX",
          "product_id": "CSAFPID-32012"
        },
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11012"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.34 installed on FL SWITCH 3016",
          "product_id": "CSAFPID-32013"
        },
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11013"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.34 installed on FL SWITCH 3016E",
          "product_id": "CSAFPID-32014"
        },
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11014"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.34 installed on FL SWITCH 3016T",
          "product_id": "CSAFPID-32015"
        },
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11015"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.34 installed on FL SWITCH 4000T-8POE-2SFP-R",
          "product_id": "CSAFPID-32016"
        },
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11016"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.34 installed on FL SWITCH 4008T-2GT-3FX SM",
          "product_id": "CSAFPID-32017"
        },
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11017"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.34 installed on FL SWITCH 4008T-2GT-4FX SM",
          "product_id": "CSAFPID-32018"
        },
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11018"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.34 installed on FL SWITCH 4008T-2SFP",
          "product_id": "CSAFPID-32019"
        },
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11019"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.34 installed on FL SWITCH 4012T 2GT 2FX",
          "product_id": "CSAFPID-32020"
        },
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11020"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.34 installed on FL SWITCH 4012T-2GT-2FX ST",
          "product_id": "CSAFPID-32021"
        },
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11021"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.34 installed on FL SWITCH 4800E-24FX-4GC",
          "product_id": "CSAFPID-32022"
        },
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11022"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.34 installed on FL SWITCH 4800E-24FX SM-4GC",
          "product_id": "CSAFPID-32023"
        },
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11023"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.34 installed on FL SWITCH 4808E-16FX-4GC",
          "product_id": "CSAFPID-32024"
        },
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11024"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.34 installed on FL SWITCH 4808E-16FX LC-4GC",
          "product_id": "CSAFPID-32025"
        },
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11025"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.34 installed on FL SWITCH 4808E-16FX SM-4GC",
          "product_id": "CSAFPID-32026"
        },
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11026"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.34 installed on FL SWITCH 4808E-16FX SM LC-4GC",
          "product_id": "CSAFPID-32027"
        },
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11027"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.34 installed on FL SWITCH 4808E-16FX SM ST-4GC",
          "product_id": "CSAFPID-32028"
        },
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11028"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.34 installed on FL SWITCH 4808E-16FX ST-4GC",
          "product_id": "CSAFPID-32029"
        },
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11029"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.34 installed on FL SWITCH 4824E-4GC",
          "product_id": "CSAFPID-32030"
        },
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11030"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2018-10729",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "notes": [
        {
          "category": "description",
          "text": "All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 allow reading the configuration file by an unauthenticated user.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-32001",
          "CSAFPID-32002",
          "CSAFPID-32003",
          "CSAFPID-32004",
          "CSAFPID-32005",
          "CSAFPID-32006",
          "CSAFPID-32007",
          "CSAFPID-32008",
          "CSAFPID-32009",
          "CSAFPID-32010",
          "CSAFPID-32011",
          "CSAFPID-32012",
          "CSAFPID-32013",
          "CSAFPID-32014",
          "CSAFPID-32015",
          "CSAFPID-32016",
          "CSAFPID-32017",
          "CSAFPID-32018",
          "CSAFPID-32019",
          "CSAFPID-32020",
          "CSAFPID-32021",
          "CSAFPID-32022",
          "CSAFPID-32023",
          "CSAFPID-32024",
          "CSAFPID-32025",
          "CSAFPID-32026",
          "CSAFPID-32027",
          "CSAFPID-32028",
          "CSAFPID-32029",
          "CSAFPID-32030"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004",
          "CSAFPID-31005",
          "CSAFPID-31006",
          "CSAFPID-31007",
          "CSAFPID-31008",
          "CSAFPID-31009",
          "CSAFPID-31010",
          "CSAFPID-31011",
          "CSAFPID-31012",
          "CSAFPID-31013",
          "CSAFPID-31014",
          "CSAFPID-31015",
          "CSAFPID-31016",
          "CSAFPID-31017",
          "CSAFPID-31018",
          "CSAFPID-31019",
          "CSAFPID-31020",
          "CSAFPID-31021",
          "CSAFPID-31022",
          "CSAFPID-31023",
          "CSAFPID-31024",
          "CSAFPID-31025",
          "CSAFPID-31026",
          "CSAFPID-31027",
          "CSAFPID-31028",
          "CSAFPID-31029",
          "CSAFPID-31030"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "Customers using Phoenix Contact managed FL SWITCH devices with affected firmware versions are recommended to disable the switch Web Agent.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Customers using Phoenix Contact managed FL SWITCH devices with affected firmware versions are recommended to update the firmware to version 1.34 which fixes this vulnerability. The updated firmware may be downloaded from the managed switch product page on the Phoenix Contact website:\n\n| Article No. | Model                             | Updated Firmware |\n|-------------|-----------------------------------|------------------|\n| 2891030     | FL SWITCH 3005                    | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3005-2891030?type=firmware_update\u0026utm_source=qr\u0026utm_medium=print\u0026utm_campaign=product_detection) |\n| 2891032     | FL SWITCH 3005T                   | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3005t-2891032?type=firmware_update\u0026utm_source=qr\u0026utm_medium=print\u0026utm_campaign=product_detection) |\n| 2891033     | FL SWITCH 3004T-FX                | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3004t-fx-2891033?type=firmware_update\u0026utm_source=qr\u0026utm_medium=print\u0026utm_campaign=product_detection) |\n| 2891034     | FL SWITCH 3004T-FX ST             | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3004t-fx-st-2891034?type=firmware_update\u0026utm_source=qr\u0026utm_medium=print\u0026utm_campaign=product_detection) |\n| 2891031     | FL SWITCH 3008                    | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3008-2891031?type=firmware_update\u0026utm_source=qr\u0026utm_medium=print\u0026utm_campaign=product_detection) |\n| 2891035     | FL SWITCH 3008T                   | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3008t-2891035?type=firmware_update\u0026utm_source=qr\u0026utm_medium=print\u0026utm_campaign=product_detection) |\n| 2891036     | FL SWITCH 3006T-2FX               | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3006t-2fx-2891036?type=firmware_update\u0026utm_source=qr\u0026utm_medium=print\u0026utm_campaign=product_detection) |\n| 2891037     | FL SWITCH 3006T-2FX ST            | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3006t-2fx-st-2891037?type=firmware_update\u0026utm_source=qr\u0026utm_medium=print\u0026utm_campaign=product_detection) |\n| 2891067     | FL SWITCH 3012E-2SFX              | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3012e-2sfx-2891067?type=firmware_update\u0026utm_source=qr\u0026utm_medium=print\u0026utm_campaign=product_detection) |\n| 2891066     | FL SWITCH 3016E                   | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3016e-2891066?type=firmware_update\u0026utm_source=qr\u0026utm_medium=print\u0026utm_campaign=product_detection) |\n| 2891058     | FL SWITCH 3016                    | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3016-2891058?type=firmware_update\u0026utm_source=qr\u0026utm_medium=print\u0026utm_campaign=product_detection) |\n| 2891059     | FL SWITCH 3016T                   | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3016t-2891059?type=firmware_update\u0026utm_source=qr\u0026utm_medium=print\u0026utm_campaign=product_detection) |\n| 2891060     | FL SWITCH 3006T-2FX SM            | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3006t-2fx-sm-2891060?type=firmware_update\u0026utm_source=qr\u0026utm_medium=print\u0026utm_campaign=product_detection) |\n| 2891062     | FL SWITCH 4008T-2SFP              | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4008t-2sfp-2891062?type=firmware_update\u0026utm_source=qr\u0026utm_medium=print\u0026utm_campaign=product_detection) |\n| 2891061     | FL SWITCH 4008T-2GT-4FX SM        | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4008t-2gt-4fx-sm-2891061?type=firmware_update\u0026utm_source=qr\u0026utm_medium=print\u0026utm_campaign=product_detection) |\n| 2891160     | FL SWITCH 4008T-2GT-3FX SM        | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4008t-2gt-3fx-sm-2891160?type=firmware_update\u0026utm_source=qr\u0026utm_medium=print\u0026utm_campaign=product_detection) |\n| 2891073     | FL SWITCH 4808E-16FX LC-4GC       | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4808e-16fx-lc-4gc-2891073?type=firmware_update\u0026utm_source=qr\u0026utm_medium=print\u0026utm_campaign=product_detection) |\n| 2891080     | FL SWITCH 4808E-16FX SM-4GC       | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4808e-16fx-sm-4gc-2891080?type=firmware_update\u0026utm_source=qr\u0026utm_medium=print\u0026utm_campaign=product_detection) |\n| 2891086     | FL SWITCH 4808E-16FX SM ST-4GC    | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4808e-16fx-sm-st-4gc-2891086?type=firmware_update\u0026utm_source=qr\u0026utm_medium=print\u0026utm_campaign=product_detection) |\n| 2891085     | FL SWITCH 4808E-16FX ST-4GC       | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4808e-16fx-st-4gc-2891085?type=firmware_update\u0026utm_source=qr\u0026utm_medium=print\u0026utm_campaign=product_detection) |\n| 2891079     | FL SWITCH 4808E-16FX-4GC          | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4808e-16fx-4gc-2891079?type=firmware_update\u0026utm_source=qr\u0026utm_medium=print\u0026utm_campaign=product_detection) |\n| 2891074     | FL SWITCH 4808E-16FX SM LC-4GC    | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4808e-16fx-sm-lc-4gc-2891074?type=firmware_update\u0026utm_source=qr\u0026utm_medium=print\u0026utm_campaign=product_detection) |\n| 2891063     | FL SWITCH 4012T 2GT 2FX           | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4012t-2gt-2fx-2891063?type=firmware_update\u0026utm_source=qr\u0026utm_medium=print\u0026utm_campaign=product_detection) |\n| 2891161     | FL SWITCH 4012T-2GT-2FX ST        | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4012t-2gt-2fx-st-2891161?type=firmware_update\u0026utm_source=qr\u0026utm_medium=print\u0026utm_campaign=product_detection) |\n| 2891072     | FL SWITCH 4824E-4GC               | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4824e-4gc-2891072?type=firmware_update\u0026utm_source=qr\u0026utm_medium=print\u0026utm_campaign=product_detection) |\n| 2891102     | FL SWITCH 4800E-24FX-4GC          | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4800e-24fx-4gc-2891102?type=firmware_update\u0026utm_source=qr\u0026utm_medium=print\u0026utm_campaign=product_detection) |\n| 2891104     | FL SWITCH 4800E-24FX SM-4GC       | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-4800e-24fx-sm-4gc-2891104?type=firmware_update\u0026utm_source=qr\u0026utm_medium=print\u0026utm_campaign=product_detection) |\n| 2891120     | FL SWITCH 3012E-2FX               | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3012e-2fx-2891120?type=firmware_update\u0026utm_source=qr\u0026utm_medium=print\u0026utm_campaign=product_detection) |\n| 2891119     | FL SWITCH 3012E-2FX SM            | [Download](https://www.phoenixcontact.com/de-de/produkte/switch-fl-switch-3012e-2fx-sm-2891119?type=firmware_update\u0026utm_source=qr\u0026utm_medium=print\u0026utm_campaign=product_detection) |\n| 2891162     | FL SWITCH 4000T-8POE-2SFP-R       | please contact your local customer service |",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "environmentalScore": 5.3,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 5.3,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004",
            "CSAFPID-31005",
            "CSAFPID-31006",
            "CSAFPID-31007",
            "CSAFPID-31008",
            "CSAFPID-31009",
            "CSAFPID-31010",
            "CSAFPID-31011",
            "CSAFPID-31012",
            "CSAFPID-31013",
            "CSAFPID-31014",
            "CSAFPID-31015",
            "CSAFPID-31016",
            "CSAFPID-31017",
            "CSAFPID-31018",
            "CSAFPID-31019",
            "CSAFPID-31020",
            "CSAFPID-31021",
            "CSAFPID-31022",
            "CSAFPID-31023",
            "CSAFPID-31024",
            "CSAFPID-31025",
            "CSAFPID-31026",
            "CSAFPID-31027",
            "CSAFPID-31028",
            "CSAFPID-31029",
            "CSAFPID-31030"
          ]
        }
      ],
      "title": "CVE-2018-10729"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…