CVE-2018-13994

CWE-400 — Uncontrolled Resource Consumption3 documents3 sources

Severity

7.5HIGH

EPSS

0.4%

top 41.18%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

29

Phoenixcontact FL Switch 3004t-fx Firmware Phoenixcontact FL Switch 3004t-fx ST Firmware Phoenixcontact FL Switch 3005 Firmware +26 more

Timeline

PublishedMay 7

Latest updateMay 24

Description

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 is vulnerable to a denial-of-service attack by making more than 120 connections.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages29 packages

▶NVDphoenixcontact/fl_switch_3005_firmware1.0 — 1.34

▶NVDphoenixcontact/fl_switch_3008_firmware1.0 — 1.34

▶NVDphoenixcontact/fl_switch_3016_firmware1.0 — 1.34

▶NVDphoenixcontact/fl_switch_3005t_firmware1.0 — 1.34

▶NVDphoenixcontact/fl_switch_3008t_firmware1.0 — 1.34

🔴Vulnerability Details

2

GHSA

GHSA-9xc9-7qcm-99r9: The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1↗2022-05-24

▶

CVEList

CVE-2018-13994: The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1↗2019-05-07

▶

CVE-2018-13994 (HIGH CVSS 7.5) | The WebUI of PHOENIX CONTACT FL SWI | cvebase.io