Advisories · Technology
Phoenix Contact FL SWITCH 2016.
Every CVE that names Phoenix Contact FL SWITCH 2016 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.1 High
Cross‑Site Request Forgery in Link Aggregation Configuration
- Phoenix Contact FL SWITCH 2005
- Phoenix Contact FL SWITCH 2008
- Cross-site request forgery (CSRF)
- CVSS 7.1 High
Stored Cross‑Site Scripting in Link Aggregation Name Handling
- Phoenix Contact FL SWITCH 2005
- Phoenix Contact FL SWITCH 2008
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Stack-Based Buffer Overflow in CLI Login Username Handling over CLI
- Phoenix Contact FL SWITCH 2005
- Phoenix Contact FL SWITCH 2008
- Memory corruption
- CVSS 6.5 Medium
Stack-Based Buffer Overflow in TFTP File-Transfer Command Handling over CLI
- Phoenix Contact FL SWITCH 2005
- Phoenix Contact FL SWITCH 2008
- Memory corruption
- CVSS 4.9 Medium
Stack-Based Buffer Overflow in File Install Parameter Handling
- Phoenix Contact FL SWITCH 2005
- Phoenix Contact FL SWITCH 2008
- Memory corruption
- CVSS 4.9 Medium
Stack-Based Buffer Overflow in File Transfer Parameter Handling
- Phoenix Contact FL SWITCH 2005
- Phoenix Contact FL SWITCH 2008
- Memory corruption
- CVSS 7.2 High
Command Injection Vulnerability in Root CA Certificate Transfer Workflow
- Phoenix Contact FL SWITCH 2005
- Phoenix Contact FL SWITCH 2008
- Command injection
- CVSS 6.5 Medium
Buffer Overflow using TFTP Filename
- Phoenix Contact FL SWITCH 2005
- Phoenix Contact FL SWITCH 2008
- Memory corruption
- CVSS 4.3 Medium
Authenticated Denial-of-Service via SSH
- Phoenix Contact FL SWITCH 2005
- Phoenix Contact FL SWITCH 2008
- Denial of service
- CVSS 4.6 Medium
Hardcoded User Password
- Phoenix Contact FL SWITCH 2005
- Phoenix Contact FL SWITCH 2008
- Hard-coded credentials
- CVSS 6.5 Medium
Authenticated Denial-of-Service via Webshell
- Phoenix Contact FL SWITCH 2005
- Phoenix Contact FL SWITCH 2008
- Denial of service
- CVSS 6.8 Medium
Weak/Predictable root Password
- Phoenix Contact FL SWITCH 2005
- Phoenix Contact FL SWITCH 2008
- Weak cryptography or TLS
- CVSS 6.8 Medium
Shell access to UART Console
- Phoenix Contact FL SWITCH 2005
- Phoenix Contact FL SWITCH 2008
- CWE-1299
- CVSS 7.1 High
Reflected XSS vulnerability in dyn_conn.php
- Phoenix Contact FL SWITCH 2005
- Phoenix Contact FL SWITCH 2008
- Cross-site scripting (XSS)
- CVSS 7.1 High
Reflected XSS vulnerability in pxc_portCntr2.php
- Phoenix Contact FL SWITCH 2005
- Phoenix Contact FL SWITCH 2008
- Cross-site scripting (XSS)
- CVSS 7.1 High
Reflected XSS vulnerability in pxc_portSecCfg.php
- Phoenix Contact FL SWITCH 2005
- Phoenix Contact FL SWITCH 2008
- Cross-site scripting (XSS)
- CVSS 7.1 High
Reflected XSS vulnerability in pxc_vlanIntfCfg.php
- Phoenix Contact FL SWITCH 2005
- Phoenix Contact FL SWITCH 2008
- Cross-site scripting (XSS)
- CVSS 7.1 High
Reflected XSS vulnerability in pxc_Dot1xCfg.php
- Phoenix Contact FL SWITCH 2005
- Phoenix Contact FL SWITCH 2008
- Cross-site scripting (XSS)
- CVSS 7.1 High
Reflected XSS vulnerability in port_util.php
- Phoenix Contact FL SWITCH 2005
- Phoenix Contact FL SWITCH 2008
- Cross-site scripting (XSS)
- CVSS 7.1 High
Reflected XSS vulnerability in pxc_PortCfg.php
- Phoenix Contact FL SWITCH 2005
- Phoenix Contact FL SWITCH 2008
- Cross-site scripting (XSS)
- CVSS 7.1 High
Reflected XSS vulnerability in pxc_portCntr.php
- Phoenix Contact FL SWITCH 2005
- Phoenix Contact FL SWITCH 2008
- Cross-site scripting (XSS)
- CVSS 7.1 High
Reflected XSS vulnerability in pxc_portSfp.php
- Phoenix Contact FL SWITCH 2005
- Phoenix Contact FL SWITCH 2008
- Cross-site scripting (XSS)