CVE-2018-13991

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 leaks private information in firmware images.
References
Link Resource
http://www.securityfocus.com/bid/106737 Third Party Advisory VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-19-024-02 Third Party Advisory US Government Resource VDB Entry
http://www.securityfocus.com/bid/106737 Third Party Advisory VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-19-024-02 Third Party Advisory US Government Resource VDB Entry
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_3005_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_3005:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_3005t_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_3005t:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_3004t-fx_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_3004t-fx:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_3004t-fx_st_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_3004t-fx_st:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_3008_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_3008:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_3008t_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_3008t:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_3006t-2fx_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_3006t-2fx:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_3006t-2fx_st_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_3006t-2fx_st:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_3012e-2sfx_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_3012e-2sfx:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_3016e_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_3016e:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_3016_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_3016:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_3016t_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_3016t:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_3006t-2fx_sm_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_3006t-2fx_sm:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_4008t-2sfp_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_4008t-2sfp:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_4008t-2gt-4fx_sm_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_4008t-2gt-4fx_sm:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_4008t-2gt-3fx_sm_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_4008t-2gt-3fx_sm:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_4808e-16fx_lc-4gc_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_4808e-16fx_lc-4gc:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_4808e-16fx_sm-4gc_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_4808e-16fx_sm-4gc:-:*:*:*:*:*:*:*

Configuration 19 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_4808e-16fx_sm_st-4gc_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_4808e-16fx_sm_st-4gc:-:*:*:*:*:*:*:*

Configuration 20 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_4808e-16fx_st-4gc_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_4808e-16fx_st-4gc:-:*:*:*:*:*:*:*

Configuration 21 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_4808e-16fx-4gc_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_4808e-16fx-4gc:-:*:*:*:*:*:*:*

Configuration 22 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_4808e-16fx_sm_lc-4gc_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_4808e-16fx_sm_lc-4gc:-:*:*:*:*:*:*:*

Configuration 23 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_4012t_2gt_2fx_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_4012t_2gt_2fx:-:*:*:*:*:*:*:*

Configuration 24 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_4012t-2gt-2fx_st_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_4012t-2gt-2fx_st:-:*:*:*:*:*:*:*

Configuration 25 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_4824e-4gc_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_4824e-4gc:-:*:*:*:*:*:*:*

Configuration 26 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_4800e-24fx-4gc_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_4800e-24fx-4gc:-:*:*:*:*:*:*:*

Configuration 27 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_4800e-24fx_sm-4gc_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_4800e-24fx_sm-4gc:-:*:*:*:*:*:*:*

Configuration 28 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_3012e-2fx_sm_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_3012e-2fx_sm:-:*:*:*:*:*:*:*

Configuration 29 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_4000t-8poe-2sfp-r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_4000t-8poe-2sfp-r:-:*:*:*:*:*:*:*

History

21 Nov 2024, 03:48

Type Values Removed Values Added
References () http://www.securityfocus.com/bid/106737 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/106737 - Third Party Advisory, VDB Entry
References () https://ics-cert.us-cert.gov/advisories/ICSA-19-024-02 - US Government Resource, Third Party Advisory, VDB Entry () https://ics-cert.us-cert.gov/advisories/ICSA-19-024-02 - Third Party Advisory, US Government Resource, VDB Entry

Information

Published : 2019-05-07 18:29

Updated : 2024-11-21 03:48


NVD link : CVE-2018-13991

Mitre link : CVE-2018-13991

CVE.ORG link : CVE-2018-13991


JSON object : View

Products Affected

phoenixcontact

  • fl_switch_3006t-2fx_st
  • fl_switch_4824e-4gc
  • fl_switch_4808e-16fx-4gc
  • fl_switch_3016e_firmware
  • fl_switch_4012t_2gt_2fx_firmware
  • fl_switch_4808e-16fx_lc-4gc
  • fl_switch_4808e-16fx_lc-4gc_firmware
  • fl_switch_4808e-16fx_sm_st-4gc
  • fl_switch_3005t
  • fl_switch_4008t-2gt-3fx_sm_firmware
  • fl_switch_4808e-16fx_sm_lc-4gc
  • fl_switch_4012t-2gt-2fx_st
  • fl_switch_3005t_firmware
  • fl_switch_4008t-2sfp_firmware
  • fl_switch_3006t-2fx_st_firmware
  • fl_switch_3004t-fx_st
  • fl_switch_3008
  • fl_switch_3016t
  • fl_switch_3006t-2fx
  • fl_switch_4008t-2gt-4fx_sm_firmware
  • fl_switch_4800e-24fx-4gc_firmware
  • fl_switch_3016
  • fl_switch_4800e-24fx_sm-4gc_firmware
  • fl_switch_3012e-2fx_sm
  • fl_switch_4000t-8poe-2sfp-r
  • fl_switch_4808e-16fx_sm-4gc_firmware
  • fl_switch_4808e-16fx_st-4gc_firmware
  • fl_switch_3004t-fx_firmware
  • fl_switch_4008t-2sfp
  • fl_switch_4000t-8poe-2sfp-r_firmware
  • fl_switch_4808e-16fx_sm_st-4gc_firmware
  • fl_switch_4008t-2gt-4fx_sm
  • fl_switch_3012e-2sfx_firmware
  • fl_switch_3005_firmware
  • fl_switch_4012t_2gt_2fx
  • fl_switch_3008_firmware
  • fl_switch_4008t-2gt-3fx_sm
  • fl_switch_4808e-16fx_sm_lc-4gc_firmware
  • fl_switch_4824e-4gc_firmware
  • fl_switch_3016e
  • fl_switch_3006t-2fx_firmware
  • fl_switch_4808e-16fx_st-4gc
  • fl_switch_3006t-2fx_sm_firmware
  • fl_switch_3008t_firmware
  • fl_switch_3008t
  • fl_switch_3016_firmware
  • fl_switch_4808e-16fx_sm-4gc
  • fl_switch_4800e-24fx-4gc
  • fl_switch_3016t_firmware
  • fl_switch_3012e-2sfx
  • fl_switch_3004t-fx_st_firmware
  • fl_switch_3006t-2fx_sm
  • fl_switch_4800e-24fx_sm-4gc
  • fl_switch_3012e-2fx_sm_firmware
  • fl_switch_4012t-2gt-2fx_st_firmware
  • fl_switch_3004t-fx
  • fl_switch_3005
  • fl_switch_4808e-16fx-4gc_firmware
CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor