PT-2018-1007 · Phoenix Contact · Fl Switch 3Xxx+2

Evgeniy Druzhinin + 1 · Published 2018-01-11 · Updated 2019-10-03 · CVE-2017-16743

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, and 48xxx Series products versions 1.0 through 1.32

Description An issue with improper authorization was found, allowing a remote unauthenticated attacker to craft special HTTP requests to bypass web-service authentication and obtain administrative privileges on the device. This can be achieved by exploiting weaknesses in the authorization procedure, enabling the attacker to gain administrative access through specially formed HTTP requests.

Recommendations For versions 1.0 through 1.32, consider restricting access to the web-service until a patch is available, and avoid using the device's administrative features over untrusted networks. As a temporary workaround, limit the device's exposure to the internet and isolate it from untrusted networks to minimize the risk of exploitation.

Fix

Incorrect Authorization

Improper Authorization

Weakness Enumeration

CWE-863

CWE-285

Related Identifiers

BDU:2018-00226

CVE-2017-16743

Affected Products

Fl Switch 3Xxx

Fl Switch 48Xx

Fl Switch 4Xxx

References · 6

• https://ics-cert.us-cert.gov/advisories/ICSA-18-011-03 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2017-16743 · Security Note
• https://osv.dev/vulnerability/CVE-2017-16743 · Vendor Advisory
• https://bdu.fstec.ru/vul/2018-00226 · Security Note
• https://ptsecurity.com/ru-ru/about/news/290108 · Note
• https://cert.vde.com/en-us/advisories/vde-2017-006 · Note