cbcvebase.
CVE-2018-10731
published 2018-05-17

CVE-2018-10731: All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to buffer overflows when handling very large…

critical9CVSS 3.0
AVNACHPRNUINSCCHIHAH
All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to buffer overflows when handling very large cookies (a different vulnerability than CVE-2018-10728).

Affected

29 ranges· showing 25
VendorProductVersion rangeFixed in
phoenixcontactfl_switch_3004t-fx_firmware1.0 – 1.33
phoenixcontactfl_switch_3004t-fx_st_firmware1.0 – 1.33
phoenixcontactfl_switch_3005_firmware<= 1.33
phoenixcontactfl_switch_3005t_firmware1.0 – 1.33
phoenixcontactfl_switch_3006t-2fx_firmware1.0 – 1.33
phoenixcontactfl_switch_3006t-2fx_sm_firmware1.0 – 1.33
phoenixcontactfl_switch_3006t-2fx_st_firmware1.0 – 1.33
phoenixcontactfl_switch_3008_firmware1.0 – 1.33
phoenixcontactfl_switch_3008t_firmware1.0 – 1.33
phoenixcontactfl_switch_3012e-2fx_sm_firmware1.0 – 1.33
phoenixcontactfl_switch_3012e-2sfx_firmware1.0 – 1.33
phoenixcontactfl_switch_3016_firmware1.0 – 1.33
phoenixcontactfl_switch_3016e_firmware1.0 – 1.33
phoenixcontactfl_switch_3016t_firmware1.0 – 1.33
phoenixcontactfl_switch_4000t-8poe-2sfp-r_firmware1.0 – 1.33
phoenixcontactfl_switch_4008t-2gt-3fx_sm_firmware1.0 – 1.33
phoenixcontactfl_switch_4008t-2gt-4fx_sm_firmware1.0 – 1.33
phoenixcontactfl_switch_4008t-2sfp_firmware1.0 – 1.33
phoenixcontactfl_switch_4012t-2gt-2fx_st_firmware1.0 – 1.33
phoenixcontactfl_switch_4012t_2gt_2fx_firmware1.0 – 1.33
phoenixcontactfl_switch_4800e-24fx-4gc_firmware1.0 – 1.33
phoenixcontactfl_switch_4800e-24fx_sm-4gc_firmware1.0 – 1.33
phoenixcontactfl_switch_4808e-16fx-4gc_firmware1.0 – 1.33
phoenixcontactfl_switch_4808e-16fx_lc-4gc_firmware1.0 – 1.33
phoenixcontactfl_switch_4808e-16fx_sm-4gc_firmware1.0 – 1.33