CVE-2018-13990
The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions prior to 1.35 is vulnerable to brute-force attacks, because of Improper Restriction of Excessive Authentication Attempts.
- Score
- CVSS 3.0 9.8 Critical
- Status
- Modified - cve@mitre.org
- Published
- 2019-05-06
- Last modified
- 2024-08-05
- Weaknesses
- CWE-287
Affected products
- Fl Switch 3004t-fx Firmware (Phoenixcontact)
- Fl Switch 3004t-fx St Firmware (Phoenixcontact)
- Fl Switch 3005 Firmware (Phoenixcontact)
- Fl Switch 3005t Firmware (Phoenixcontact)
- Fl Switch 3006t-2fx Firmware (Phoenixcontact)
- Fl Switch 3006t-2fx Sm Firmware (Phoenixcontact)
- Fl Switch 3006t-2fx St Firmware (Phoenixcontact)
- Fl Switch 3008 Firmware (Phoenixcontact)
- Fl Switch 3008t Firmware (Phoenixcontact)
- Fl Switch 3012e-2fx Sm Firmware (Phoenixcontact)
- Fl Switch 3012e-2sfx Firmware (Phoenixcontact)
- Fl Switch 3016 Firmware (Phoenixcontact)
- Fl Switch 3016e Firmware (Phoenixcontact)
- Fl Switch 3016t Firmware (Phoenixcontact)
- Fl Switch 4000t-8poe-2sfp-r Firmware (Phoenixcontact)
- Fl Switch 4008t-2gt-3fx Sm Firmware (Phoenixcontact)
- Fl Switch 4008t-2gt-4fx Sm Firmware (Phoenixcontact)
- Fl Switch 4008t-2sfp Firmware (Phoenixcontact)
- Fl Switch 4012t-2gt-2fx St Firmware (Phoenixcontact)
- Fl Switch 4012t 2gt 2fx Firmware (Phoenixcontact)
- Fl Switch 4800e-24fx-4gc Firmware (Phoenixcontact)
- Fl Switch 4800e-24fx Sm-4gc Firmware (Phoenixcontact)
- Fl Switch 4808e-16fx-4gc Firmware (Phoenixcontact)
- Fl Switch 4808e-16fx Lc-4gc Firmware (Phoenixcontact)
- Fl Switch 4808e-16fx Sm-4gc Firmware (Phoenixcontact)
- Fl Switch 4808e-16fx Sm Lc-4gc Firmware (Phoenixcontact)
- Fl Switch 4808e-16fx Sm St-4gc Firmware (Phoenixcontact)
- Fl Switch 4808e-16fx St-4gc Firmware (Phoenixcontact)
- Fl Switch 4824e-4gc Firmware (Phoenixcontact)
References
- http://www.securityfocus.com/bid/106737
- https://ics-cert.us-cert.gov/advisories/ICSA-19-024-02
