PT-2019-9014 · Phoenix Contact · Fl Switch 3Xxx+2

Evgeniy Druzhinin + 2 · Publicado 2019-05-07 · Atualizado 2019-10-09 · CVE-2018-13991

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 through 1.34

Description The WebUI of the affected devices leaks private information in firmware images.

Recommendations For versions 1.0 through 1.34, consider restricting access to the WebUI to minimize the risk of information leakage until a fix is available.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2018-13991

Produtos afetados

Fl Switch 3Xxx

Fl Switch 48Xx

Fl Switch 4Xxx

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-13991 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-13991 · Aviso do Fabricante
• https://ics-cert.us-cert.gov/advisories/ICSA-19-024-02 · Nota
• http://securityfocus.com/bid/106737 · Nota