CVE-2017-16743

An Improper Authorization issue was discovered in PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, and 48xxx Series products running firmware Version 1.0 to 1.32. A remote unauthenticated attacker may be able to craft special HTTP requests allowing an attacker to bypass web-service authentication allowing the attacker to obtain administrative privileges on the device.

Score
CVSS 3.0 9.8 Critical
Status
Modified - ics-cert@hq.dhs.gov
Published
2018-01-12
Last modified
2024-08-05
Weaknesses
CWE-285, CWE-863

Affected products

References

 
 
© AVABIS GmbH privacypolicy about