cbcvebase.
CVE-2018-10730
published 2018-05-17

CVE-2018-10730: All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to OS command injection.

critical9.1CVSS 3.0
AVNACLPRHUINSCCHIHAH
All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to OS command injection.

Affected

29 ranges· showing 25
VendorProductVersion rangeFixed in
phoenixcontactfl_switch_3004t-fx_firmware1.0 – 1.33
phoenixcontactfl_switch_3004t-fx_st_firmware1.0 – 1.33
phoenixcontactfl_switch_3005_firmware<= 1.33
phoenixcontactfl_switch_3005t_firmware1.0 – 1.33
phoenixcontactfl_switch_3006t-2fx_firmware1.0 – 1.33
phoenixcontactfl_switch_3006t-2fx_sm_firmware1.0 – 1.33
phoenixcontactfl_switch_3006t-2fx_st_firmware1.0 – 1.33
phoenixcontactfl_switch_3008_firmware1.0 – 1.33
phoenixcontactfl_switch_3008t_firmware1.0 – 1.33
phoenixcontactfl_switch_3012e-2fx_sm_firmware1.0 – 1.33
phoenixcontactfl_switch_3012e-2sfx_firmware1.0 – 1.33
phoenixcontactfl_switch_3016_firmware1.0 – 1.33
phoenixcontactfl_switch_3016e_firmware1.0 – 1.33
phoenixcontactfl_switch_3016t_firmware1.0 – 1.33
phoenixcontactfl_switch_4000t-8poe-2sfp-r_firmware1.0 – 1.33
phoenixcontactfl_switch_4008t-2gt-3fx_sm_firmware1.0 – 1.33
phoenixcontactfl_switch_4008t-2gt-4fx_sm_firmware1.0 – 1.33
phoenixcontactfl_switch_4008t-2sfp_firmware1.0 – 1.33
phoenixcontactfl_switch_4012t-2gt-2fx_st_firmware1.0 – 1.33
phoenixcontactfl_switch_4012t_2gt_2fx_firmware1.0 – 1.33
phoenixcontactfl_switch_4800e-24fx-4gc_firmware1.0 – 1.33
phoenixcontactfl_switch_4800e-24fx_sm-4gc_firmware1.0 – 1.33
phoenixcontactfl_switch_4808e-16fx-4gc_firmware1.0 – 1.33
phoenixcontactfl_switch_4808e-16fx_lc-4gc_firmware1.0 – 1.33
phoenixcontactfl_switch_4808e-16fx_sm-4gc_firmware1.0 – 1.33