CVE-2017-16741

Published: Jan 12, 2018Modified: Nov 21, 2024

5.3

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

An Information Exposure issue was discovered in PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, and 48xxx Series products running firmware Version 1.0 to 1.32. A remote unauthenticated attacker may be able to use Monitor Mode on the device to read diagnostic information.

Affected (29)

Phoenixcontact

29 products

Fl Switch 3005 Firmware

Fl Switch 3005t Firmware

Fl Switch 3004t Fx Firmware

Fl Switch 3004t Fx St Firmware

Fl Switch 3008 Firmware

Fl Switch 3008t Firmware

Fl Switch 3006t 2fx Firmware

Fl Switch 3006t 2fx St Firmware

Fl Switch 3012e 2sfx Firmware

Fl Switch 3016e Firmware

Fl Switch 3016 Firmware

Fl Switch 3016t Firmware

Fl Switch 3006t 2fx Sm Firmware

Fl Switch 4008t 2sfp Firmware

Fl Switch 4008t 2gt 4fx Sm Firmware

Fl Switch 4008t 2gt 3fx Sm Firmware

Fl Switch 4808e 16fx Lc 4gc Firmware

Fl Switch 4808e 16fx Sm 4gc Firmware

Fl Switch 4808e 16fx Sm St 4gc Firmware

Fl Switch 4808e 16fx St 4gc Firmware

Fl Switch 4808e 16fx 4gc Firmware

Fl Switch 4808e 16fx Sm Lc 4gc Firmware

Fl Switch 4012t 2gt 2fx Firmware

Fl Switch 4012t 2gt 2fx St Firmware

Fl Switch 4824e 4gc Firmware

Fl Switch 4800e 24fx 4gc Firmware

Fl Switch 4800e 24fx Sm 4gc Firmware

Fl Switch 3012e 2fx Sm Firmware

Fl Switch 4000t 8poe 2sfp R Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 3005 Firmware	From 1.0 to 1.32

Running on/with	Platform Versions
Phoenixcontact Fl Switch 3005	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 3005t Firmware	From 1.0 to 1.32

Running on/with	Platform Versions
Phoenixcontact Fl Switch 3005t	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 3004t Fx Firmware	From 1.0 to 1.32

Running on/with	Platform Versions
Phoenixcontact Fl Switch 3004t Fx	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 3004t Fx St Firmware	From 1.0 to 1.32

Running on/with	Platform Versions
Phoenixcontact Fl Switch 3004t Fx St	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 3008 Firmware	From 1.0 to 1.32

Running on/with	Platform Versions
Phoenixcontact Fl Switch 3008	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 3008t Firmware	From 1.0 to 1.32

Running on/with	Platform Versions
Phoenixcontact Fl Switch 3008t	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 3006t 2fx Firmware	From 1.0 to 1.32

Running on/with	Platform Versions
Phoenixcontact Fl Switch 3006t 2fx	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 3006t 2fx St Firmware	From 1.0 to 1.32

Running on/with	Platform Versions
Phoenixcontact Fl Switch 3006t 2fx St	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 3012e 2sfx Firmware	From 1.0 to 1.32

Running on/with	Platform Versions
Phoenixcontact Fl Switch 3012e 2sfx	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 3016e Firmware	From 1.0 to 1.32

Running on/with	Platform Versions
Phoenixcontact Fl Switch 3016e	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 3016 Firmware	From 1.0 to 1.32

Running on/with	Platform Versions
Phoenixcontact Fl Switch 3016	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 3016t Firmware	From 1.0 to 1.32

Running on/with	Platform Versions
Phoenixcontact Fl Switch 3016t	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 3006t 2fx Sm Firmware	From 1.0 to 1.32

Running on/with	Platform Versions
Phoenixcontact Fl Switch 3006t 2fx Sm	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 4008t 2sfp Firmware	From 1.0 to 1.32

Running on/with	Platform Versions
Phoenixcontact Fl Switch 4008t 2sfp	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 4008t 2gt 4fx Sm Firmware	From 1.0 to 1.32

Running on/with	Platform Versions
Phoenixcontact Fl Switch 4008t 2gt 4fx Sm	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 4008t 2gt 3fx Sm Firmware	From 1.0 to 1.32

Running on/with	Platform Versions
Phoenixcontact Fl Switch 4008t 2gt 3fx Sm	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 4808e 16fx Lc 4gc Firmware	From 1.0 to 1.32

Running on/with	Platform Versions
Phoenixcontact Fl Switch 4808e 16fx Lc 4gc	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 4808e 16fx Sm 4gc Firmware	From 1.0 to 1.32

Running on/with	Platform Versions
Phoenixcontact Fl Switch 4808e 16fx Sm 4gc	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 4808e 16fx Sm St 4gc Firmware	From 1.0 to 1.32

Running on/with	Platform Versions
Phoenixcontact Fl Switch 4808e 16fx Sm St 4gc	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 4808e 16fx St 4gc Firmware	From 1.0 to 1.32

Running on/with	Platform Versions
Phoenixcontact Fl Switch 4808e 16fx St 4gc	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 4808e 16fx 4gc Firmware	From 1.0 to 1.32

Running on/with	Platform Versions
Phoenixcontact Fl Switch 4808e 16fx 4gc	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 4808e 16fx Sm Lc 4gc Firmware	From 1.0 to 1.32

Running on/with	Platform Versions
Phoenixcontact Fl Switch 4808e 16fx Sm Lc 4gc	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 4012t 2gt 2fx Firmware	From 1.0 to 1.32

Running on/with	Platform Versions
Phoenixcontact Fl Switch 4012t 2gt 2fx	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 4012t 2gt 2fx St Firmware	From 1.0 to 1.32

Running on/with	Platform Versions
Phoenixcontact Fl Switch 4012t 2gt 2fx St	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 4824e 4gc Firmware	From 1.0 to 1.32

Running on/with	Platform Versions
Phoenixcontact Fl Switch 4824e 4gc	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 4800e 24fx 4gc Firmware	From 1.0 to 1.32

Running on/with	Platform Versions
Phoenixcontact Fl Switch 4800e 24fx 4gc	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 4800e 24fx Sm 4gc Firmware	From 1.0 to 1.32

Running on/with	Platform Versions
Phoenixcontact Fl Switch 4800e 24fx Sm 4gc	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 3012e 2fx Sm Firmware	From 1.0 to 1.32

Running on/with	Platform Versions
Phoenixcontact Fl Switch 3012e 2fx Sm	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 4000t 8poe 2sfp R Firmware	From 1.0 to 1.32

Running on/with	Platform Versions
Phoenixcontact Fl Switch 4000t 8poe 2sfp R	All versions

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (4)

https://cert.vde.com/en-us/advisories/vde-2017-006

Source: ics-cert@hq.dhs.gov

https://ics-cert.us-cert.gov/advisories/ICSA-18-011-03

Source: ics-cert@hq.dhs.gov

PatchThird Party AdvisoryUS Government Resource

https://cert.vde.com/en-us/advisories/vde-2017-006

Source: af854a3a-2127-422b-91ae-364da2661108

https://ics-cert.us-cert.gov/advisories/ICSA-18-011-03

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party AdvisoryUS Government Resource

Timeline

No history available yet.