CVE-2018-10730

EUVD-2018-2800 · Published May 17, 2018

All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to OS command injection.

Technologies

Phoenixcontact Fl Switch 3006T-2FxPhoenixcontact Fl Switch 4824E-4GcPhoenixcontact Fl Switch 4808E-16Fx Lc-4GcPhoenixcontact Fl Switch 4012T-2Gt-2Fx StPhoenixcontact Fl Switch 3016T FirmwarePhoenixcontact Fl Switch 3005Phoenixcontact Fl Switch 4000T-8Poe-2Sfp-R FirmwarePhoenixcontact Fl Switch 3016EPhoenixcontact Fl Switch 4808E-16Fx St-4GcPhoenixcontact Fl Switch 3004T-Fx FirmwarePhoenixcontact Fl Switch 3005TPhoenixcontact Fl Switch 4808E-16Fx Sm St-4GcPhoenixcontact Fl Switch 4800E-24Fx-4GcPhoenixcontact Fl Switch 4800E-24Fx Sm-4Gc FirmwarePhoenixcontact Fl Switch 4808E-16Fx Sm-4Gc FirmwarePhoenixcontact Fl Switch 3016Phoenixcontact Fl Switch 4008T-2Gt-4Fx SmPhoenixcontact Fl Switch 3016TPhoenixcontact Fl Switch 4808E-16Fx Sm Lc-4Gc FirmwarePhoenixcontact Fl Switch 3016 FirmwarePhoenixcontact Fl Switch 3006T-2Fx St FirmwarePhoenixcontact Fl Switch 4012T-2Gt-2Fx St FirmwarePhoenixcontact Fl Switch 3006T-2Fx StPhoenixcontact Fl Switch 3006T-2Fx FirmwarePhoenixcontact Fl Switch 4808E-16Fx Sm St-4Gc FirmwarePhoenixcontact Fl Switch 4008T-2Gt-3Fx Sm FirmwarePhoenixcontact Fl Switch 3012E-2Sfx FirmwarePhoenixcontact Fl Switch 4012T 2Gt 2FxPhoenixcontact Fl Switch 4808E-16Fx Sm-4GcPhoenixcontact Fl Switch 4808E-16Fx-4GcPhoenixcontact Fl Switch 3008Phoenixcontact Fl Switch 4800E-24Fx Sm-4GcPhoenixcontact Fl Switch 3008T FirmwarePhoenixcontact Fl Switch 4808E-16Fx Lc-4Gc FirmwarePhoenixcontact Fl Switch 3006T-2Fx Sm FirmwarePhoenixcontact Fl Switch 3012E-2SfxPhoenixcontact Fl Switch 4008T-2Gt-4Fx Sm FirmwarePhoenixcontact Fl Switch 3004T-Fx StPhoenixcontact Fl Switch 4808E-16Fx St-4Gc FirmwarePhoenixcontact Fl Switch 3005 FirmwarePhoenixcontact Fl Switch 3016E FirmwarePhoenixcontact Fl Switch 4012T 2Gt 2Fx FirmwarePhoenixcontact Fl Switch 4800E-24Fx-4Gc FirmwarePhoenixcontact Fl Switch 3004T-FxPhoenixcontact Fl Switch 3012E-2Fx Sm FirmwarePhoenixcontact Fl Switch 3012E-2Fx SmPhoenixcontact Fl Switch 4000T-8Poe-2Sfp-RPhoenixcontact Fl Switch 4808E-16Fx Sm Lc-4GcPhoenixcontact Fl Switch 3005T FirmwarePhoenixcontact Fl Switch 4008T-2Sfp FirmwarePhoenixcontact Fl Switch 3006T-2Fx SmPhoenixcontact Fl Switch 4008T-2SfpPhoenixcontact Fl Switch 3004T-Fx St FirmwarePhoenixcontact Fl Switch 3008TPhoenixcontact Fl Switch 3008 FirmwarePhoenixcontact Fl Switch 4008T-2Gt-3Fx SmPhoenixcontact Fl Switch 4824E-4Gc FirmwarePhoenixcontact Fl Switch 4808E-16Fx-4Gc Firmware

Weaknesses

CWE-78

CVSS scores

v3.09.1CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
v2.09.0AV:N/AC:L/Au:S/C:C/I:C/A:C

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access

T1190Exploit Public-Facing Application

References

Potentially impacted assets

See if this affects your attack surface