PT-2017-3434 · Phoenix Contact · Fl Switch 3Xxx+2

Evgeniy Druzhinin + 1 · Published 2017-08-02 · Updated 2018-05-17 · CVE-2017-16741

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, and 48xxx Series products versions 1.0 through 1.32

Description An Information Exposure issue allows a remote unauthenticated attacker to use Monitor Mode on the device to read diagnostic information. The vulnerability is related to deficiencies in the authorization procedure, which can be exploited by a remote attacker to view diagnostic information using the device's Monitor Mode.

Recommendations For versions 1.0 through 1.32, as a temporary workaround, consider disabling the Monitor Mode on the device until a patch is available. Restrict access to the diagnostic information to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2018-00225

CVE-2017-16741

Affected Products

Fl Switch 3Xxx

Fl Switch 48Xx

Fl Switch 4Xxx

References · 6

• https://bdu.fstec.ru/vul/2018-00225 · Security Note
• https://osv.dev/vulnerability/CVE-2017-16741 · Vendor Advisory
• https://ics-cert.us-cert.gov/advisories/ICSA-18-011-03 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2017-16741 · Security Note
• https://ptsecurity.com/ru-ru/about/news/290108 · Note
• https://cert.vde.com/en-us/advisories/vde-2017-006 · Note