CVE-2018-10730
published 2018-05-17CVE-2018-10730: All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to OS command injection.
PriorityP355critical9.1CVSS 3.0
AVNACLPRHUINSCCHIHAH
EPSS
4.62%
90.7th percentile
All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to OS command injection.
Affected
29 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| phoenixcontact | fl_switch_3004t-fx_firmware | 1.0 – 1.33 | — |
| phoenixcontact | fl_switch_3004t-fx_st_firmware | 1.0 – 1.33 | — |
| phoenixcontact | fl_switch_3005_firmware | <= 1.33 | — |
| phoenixcontact | fl_switch_3005t_firmware | 1.0 – 1.33 | — |
| phoenixcontact | fl_switch_3006t-2fx_firmware | 1.0 – 1.33 | — |
| phoenixcontact | fl_switch_3006t-2fx_sm_firmware | 1.0 – 1.33 | — |
| phoenixcontact | fl_switch_3006t-2fx_st_firmware | 1.0 – 1.33 | — |
| phoenixcontact | fl_switch_3008_firmware | 1.0 – 1.33 | — |
| phoenixcontact | fl_switch_3008t_firmware | 1.0 – 1.33 | — |
| phoenixcontact | fl_switch_3012e-2fx_sm_firmware | 1.0 – 1.33 | — |
| phoenixcontact | fl_switch_3012e-2sfx_firmware | 1.0 – 1.33 | — |
| phoenixcontact | fl_switch_3016_firmware | 1.0 – 1.33 | — |
| phoenixcontact | fl_switch_3016e_firmware | 1.0 – 1.33 | — |
| phoenixcontact | fl_switch_3016t_firmware | 1.0 – 1.33 | — |
| phoenixcontact | fl_switch_4000t-8poe-2sfp-r_firmware | 1.0 – 1.33 | — |
| phoenixcontact | fl_switch_4008t-2gt-3fx_sm_firmware | 1.0 – 1.33 | — |
| phoenixcontact | fl_switch_4008t-2gt-4fx_sm_firmware | 1.0 – 1.33 | — |
| phoenixcontact | fl_switch_4008t-2sfp_firmware | 1.0 – 1.33 | — |
| phoenixcontact | fl_switch_4012t-2gt-2fx_st_firmware | 1.0 – 1.33 | — |
| phoenixcontact | fl_switch_4012t_2gt_2fx_firmware | 1.0 – 1.33 | — |
| phoenixcontact | fl_switch_4800e-24fx-4gc_firmware | 1.0 – 1.33 | — |
| phoenixcontact | fl_switch_4800e-24fx_sm-4gc_firmware | 1.0 – 1.33 | — |
| phoenixcontact | fl_switch_4808e-16fx-4gc_firmware | 1.0 – 1.33 | — |
| phoenixcontact | fl_switch_4808e-16fx_lc-4gc_firmware | 1.0 – 1.33 | — |
| phoenixcontact | fl_switch_4808e-16fx_sm-4gc_firmware | 1.0 – 1.33 | — |
CVSS provenance
nvdv3.09.1CRITICALCVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
nvdv2.09.0CRITICALAV:N/AC:L/Au:S/C:C/I:C/A:C
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-v9j3-6w7p-3346: All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1
ghsa_unreviewed·2022-05-14
CVE-2018-10730 [CRITICAL] CWE-78 GHSA-v9j3-6w7p-3346: All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1
All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to OS command injection.
CISA ICS
PHOENIX CONTACT FL SWITCH 3xxx/4xxx/48xx Series
cisa_ics·2018-05-17·CVSS 5.3
[MEDIUM] PHOENIX CONTACT FL SWITCH 3xxx/4xxx/48xx Series
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
PHOENIX CONTACT FL SWITCH 3xxx/4xxx/48xx Series
Last RevisedMay 17, 2018
Alert CodeICSA-18-137-02
## 1. EXECUTIVE SUMMARY
-
CVSS v3 9.1
- ATTENTION: Exploitable remotely/low skill level to exploit
- Vendor: PHOENIX CONTACT
- Equipment: FL SWITCH 3xxx/4xxx/48xx Series
- Vulnerabilities: Command Injection, Information Exposure, Stack-based Buffer Overflow
## 2. RISK EVALUATION
Successful exploitation of these vulnerabilities could allow for remote code execution and information disclosure.
## 3. TECHNICAL DETAILS
## 3.1 AFFECTED PRODUCTS
All FL SWITCH 3xxx, 4xxx, and 48xx
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2018-05-17
Published