CVE-2018-13991

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 leaks private information in firmware images.

Score

CVSS 3.0 5.3 Medium

Status

Modified - cve@mitre.org

Published

2019-05-07

Last modified

2024-08-05

Weaknesses

CWE-200

Affected products

• Fl Switch 3004t-fx Firmware (Phoenixcontact)
• Fl Switch 3004t-fx St Firmware (Phoenixcontact)
• Fl Switch 3005 Firmware (Phoenixcontact)
• Fl Switch 3005t Firmware (Phoenixcontact)
• Fl Switch 3006t-2fx Firmware (Phoenixcontact)
• Fl Switch 3006t-2fx Sm Firmware (Phoenixcontact)
• Fl Switch 3006t-2fx St Firmware (Phoenixcontact)
• Fl Switch 3008 Firmware (Phoenixcontact)
• Fl Switch 3008t Firmware (Phoenixcontact)
• Fl Switch 3012e-2fx Sm Firmware (Phoenixcontact)
• Fl Switch 3012e-2sfx Firmware (Phoenixcontact)
• Fl Switch 3016 Firmware (Phoenixcontact)
• Fl Switch 3016e Firmware (Phoenixcontact)
• Fl Switch 3016t Firmware (Phoenixcontact)
• Fl Switch 4000t-8poe-2sfp-r Firmware (Phoenixcontact)
• Fl Switch 4008t-2gt-3fx Sm Firmware (Phoenixcontact)
• Fl Switch 4008t-2gt-4fx Sm Firmware (Phoenixcontact)
• Fl Switch 4008t-2sfp Firmware (Phoenixcontact)
• Fl Switch 4012t-2gt-2fx St Firmware (Phoenixcontact)
• Fl Switch 4012t 2gt 2fx Firmware (Phoenixcontact)
• Fl Switch 4800e-24fx-4gc Firmware (Phoenixcontact)
• Fl Switch 4800e-24fx Sm-4gc Firmware (Phoenixcontact)
• Fl Switch 4808e-16fx-4gc Firmware (Phoenixcontact)
• Fl Switch 4808e-16fx Lc-4gc Firmware (Phoenixcontact)
• Fl Switch 4808e-16fx Sm-4gc Firmware (Phoenixcontact)
• Fl Switch 4808e-16fx Sm Lc-4gc Firmware (Phoenixcontact)
• Fl Switch 4808e-16fx Sm St-4gc Firmware (Phoenixcontact)
• Fl Switch 4808e-16fx St-4gc Firmware (Phoenixcontact)
• Fl Switch 4824e-4gc Firmware (Phoenixcontact)

References

• http://www.securityfocus.com/bid/106737
• https://ics-cert.us-cert.gov/advisories/ICSA-19-024-02