CVE-2018-10729

Published: May 17, 2018Modified: Nov 21, 2024

5.3

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 allow reading the configuration file by an unauthenticated user.

Affected (29)

Products: Phoenixcontact: Fl Switch 3005 Firmware, Fl Switch 3005t Firmware, Fl Switch 3004t Fx Firmware, Fl Switch 3004t Fx St Firmware, Fl Switch 3008 Firmware, Fl Switch 3008t Firmware, Fl Switch 3006t 2fx Firmware, Fl Switch 3006t 2fx St Firmware, Fl Switch 3012e 2sfx Firmware, Fl Switch 3016e Firmware, Fl Switch 3016 Firmware, Fl Switch 3016t Firmware, Fl Switch 3006t 2fx Sm Firmware, Fl Switch 4008t 2sfp Firmware, Fl Switch 4008t 2gt 4fx Sm Firmware, Fl Switch 4008t 2gt 3fx Sm Firmware, Fl Switch 4808e 16fx Lc 4gc Firmware, Fl Switch 4808e 16fx Sm 4gc Firmware, Fl Switch 4808e 16fx Sm St 4gc Firmware, Fl Switch 4808e 16fx St 4gc Firmware, Fl Switch 4808e 16fx 4gc Firmware, Fl Switch 4808e 16fx Sm Lc 4gc Firmware, Fl Switch 4012t 2gt 2fx Firmware, Fl Switch 4012t 2gt 2fx St Firmware, Fl Switch 4824e 4gc Firmware, Fl Switch 4800e 24fx 4gc Firmware, Fl Switch 4800e 24fx Sm 4gc Firmware, Fl Switch 3012e 2fx Sm Firmware, Fl Switch 4000t 8poe 2sfp R Firmware

29 products

Fl Switch 3005 Firmware

Fl Switch 3005t Firmware

Fl Switch 3004t Fx Firmware

Fl Switch 3004t Fx St Firmware

Fl Switch 3008 Firmware

Fl Switch 3008t Firmware

Fl Switch 3006t 2fx Firmware

Fl Switch 3006t 2fx St Firmware

Fl Switch 3012e 2sfx Firmware

Fl Switch 3016e Firmware

Fl Switch 3016 Firmware

Fl Switch 3016t Firmware

Fl Switch 3006t 2fx Sm Firmware

Fl Switch 4008t 2sfp Firmware

Fl Switch 4008t 2gt 4fx Sm Firmware

Fl Switch 4008t 2gt 3fx Sm Firmware

Fl Switch 4808e 16fx Lc 4gc Firmware

Fl Switch 4808e 16fx Sm 4gc Firmware

Fl Switch 4808e 16fx Sm St 4gc Firmware

Fl Switch 4808e 16fx St 4gc Firmware

Fl Switch 4808e 16fx 4gc Firmware

Fl Switch 4808e 16fx Sm Lc 4gc Firmware

Fl Switch 4012t 2gt 2fx Firmware

Fl Switch 4012t 2gt 2fx St Firmware

Fl Switch 4824e 4gc Firmware

Fl Switch 4800e 24fx 4gc Firmware

Fl Switch 4800e 24fx Sm 4gc Firmware

Fl Switch 3012e 2fx Sm Firmware

Fl Switch 4000t 8poe 2sfp R Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 3005 Firmware	After 1.0 to 1.33

Running on/with	Platform Versions
Phoenixcontact Fl Switch 3005	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 3005t Firmware	From 1.0 to 1.33

Running on/with	Platform Versions
Phoenixcontact Fl Switch 3005t	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 3004t Fx Firmware	From 1.0 to 1.33

Running on/with	Platform Versions
Phoenixcontact Fl Switch 3004t Fx	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 3004t Fx St Firmware	From 1.0 to 1.33

Running on/with	Platform Versions
Phoenixcontact Fl Switch 3004t Fx St	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 3008 Firmware	From 1.0 to 1.33

Running on/with	Platform Versions
Phoenixcontact Fl Switch 3008	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 3008t Firmware	From 1.0 to 1.33

Running on/with	Platform Versions
Phoenixcontact Fl Switch 3008t	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 3006t 2fx Firmware	From 1.0 to 1.33

Running on/with	Platform Versions
Phoenixcontact Fl Switch 3006t 2fx	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 3006t 2fx St Firmware	From 1.0 to 1.33

Running on/with	Platform Versions
Phoenixcontact Fl Switch 3006t 2fx St	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 3012e 2sfx Firmware	From 1.0 to 1.33

Running on/with	Platform Versions
Phoenixcontact Fl Switch 3012e 2sfx	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 3016e Firmware	From 1.0 to 1.33

Running on/with	Platform Versions
Phoenixcontact Fl Switch 3016e	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 3016 Firmware	From 1.0 to 1.33

Running on/with	Platform Versions
Phoenixcontact Fl Switch 3016	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 3016t Firmware	From 1.0 to 1.33

Running on/with	Platform Versions
Phoenixcontact Fl Switch 3016t	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 3006t 2fx Sm Firmware	From 1.0 to 1.33

Running on/with	Platform Versions
Phoenixcontact Fl Switch 3006t 2fx Sm	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 4008t 2sfp Firmware	From 1.0 to 1.33

Running on/with	Platform Versions
Phoenixcontact Fl Switch 4008t 2sfp	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 4008t 2gt 4fx Sm Firmware	From 1.0 to 1.33

Running on/with	Platform Versions
Phoenixcontact Fl Switch 4008t 2gt 4fx Sm	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 4008t 2gt 3fx Sm Firmware	From 1.0 to 1.33

Running on/with	Platform Versions
Phoenixcontact Fl Switch 4008t 2gt 3fx Sm	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 4808e 16fx Lc 4gc Firmware	From 1.0 to 1.33

Running on/with	Platform Versions
Phoenixcontact Fl Switch 4808e 16fx Lc 4gc	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 4808e 16fx Sm 4gc Firmware	From 1.0 to 1.33

Running on/with	Platform Versions
Phoenixcontact Fl Switch 4808e 16fx Sm 4gc	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 4808e 16fx Sm St 4gc Firmware	From 1.0 to 1.33

Running on/with	Platform Versions
Phoenixcontact Fl Switch 4808e 16fx Sm St 4gc	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 4808e 16fx St 4gc Firmware	From 1.0 to 1.33

Running on/with	Platform Versions
Phoenixcontact Fl Switch 4808e 16fx St 4gc	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 4808e 16fx 4gc Firmware	From 1.0 to 1.33

Running on/with	Platform Versions
Phoenixcontact Fl Switch 4808e 16fx 4gc	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 4808e 16fx Sm Lc 4gc Firmware	From 1.0 to 1.33

Running on/with	Platform Versions
Phoenixcontact Fl Switch 4808e 16fx Sm Lc 4gc	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 4012t 2gt 2fx Firmware	From 1.0 to 1.33

Running on/with	Platform Versions
Phoenixcontact Fl Switch 4012t 2gt 2fx	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 4012t 2gt 2fx St Firmware	From 1.0 to 1.33

Running on/with	Platform Versions
Phoenixcontact Fl Switch 4012t 2gt 2fx St	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 4824e 4gc Firmware	From 1.0 to 1.33

Running on/with	Platform Versions
Phoenixcontact Fl Switch 4824e 4gc	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 4800e 24fx 4gc Firmware	From 1.0 to 1.33

Running on/with	Platform Versions
Phoenixcontact Fl Switch 4800e 24fx 4gc	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 4800e 24fx Sm 4gc Firmware	From 1.0 to 1.33

Running on/with	Platform Versions
Phoenixcontact Fl Switch 4800e 24fx Sm 4gc	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 3012e 2fx Sm Firmware	From 1.0 to 1.33

Running on/with	Platform Versions
Phoenixcontact Fl Switch 3012e 2fx Sm	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Fl Switch 4000t 8poe 2sfp R Firmware	From 1.0 to 1.33

Running on/with	Platform Versions
Phoenixcontact Fl Switch 4000t 8poe 2sfp R	All versions

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (6)

http://www.securityfocus.com/bid/104231

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://cert.vde.com/de-de/advisories/vde-2018-005

Source: cve@mitre.org

PatchThird Party Advisory

https://ics-cert.us-cert.gov/advisories/ICSA-18-137-02

Source: cve@mitre.org

PatchThird Party AdvisoryUS Government Resource

http://www.securityfocus.com/bid/104231

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://cert.vde.com/de-de/advisories/vde-2018-005

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://ics-cert.us-cert.gov/advisories/ICSA-18-137-02

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party AdvisoryUS Government Resource

Timeline

No history available yet.