CVE-2017-16743
9.8
CRITICAL · CVSS 3.0 · EPSS 3.1% (pctl 87)
In your normal cycle
Critical by CVSS (9.8), but no sign of active exploitation.
Description
An Improper Authorization issue was discovered in PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, and 48xxx Series products running firmware Version 1.0 to 1.32. A remote unauthenticated attacker may be able to craft special HTTP requests allowing an attacker to bypass web-service authentication allowing the attacker to obtain administrative privileges on the device.
Scoring
| CVSS | 9.8 (CRITICAL, v3.0) |
|---|---|
| Vector | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 3.11% — more likely to be exploited than 87% of all CVEs |
| Weakness | CWE-285 |
| On CISA KEV | no |
| Public exploit | none known |
| Published | 2018-01-12 |
| Last modified | 2026-06-17 |
Affected (40)
| Vendor | Product |
|---|---|
| phoenixcontact | fl switch 3004t-fx |
| phoenixcontact | fl switch 3004t-fx firmware |
| phoenixcontact | fl switch 3004t-fx st |
| phoenixcontact | fl switch 3004t-fx st firmware |
| phoenixcontact | fl switch 3005 |
| phoenixcontact | fl switch 3005 firmware |
| phoenixcontact | fl switch 3005t |
| phoenixcontact | fl switch 3005t firmware |
| phoenixcontact | fl switch 3006t-2fx |
| phoenixcontact | fl switch 3006t-2fx firmware |
| phoenixcontact | fl switch 3006t-2fx sm |
| phoenixcontact | fl switch 3006t-2fx sm firmware |
| phoenixcontact | fl switch 3006t-2fx st |
| phoenixcontact | fl switch 3006t-2fx st firmware |
| phoenixcontact | fl switch 3008 |
| phoenixcontact | fl switch 3008 firmware |
| phoenixcontact | fl switch 3008t |
| phoenixcontact | fl switch 3008t firmware |
| phoenixcontact | fl switch 3012e-2sfx |
| phoenixcontact | fl switch 3012e-2sfx firmware |
| phoenixcontact | fl switch 3016 |
| phoenixcontact | fl switch 3016 firmware |
| phoenixcontact | fl switch 3016e |
| phoenixcontact | fl switch 3016e firmware |
| phoenixcontact | fl switch 3016t |
| phoenixcontact | fl switch 3016t firmware |
| phoenixcontact | fl switch 4008t-2gt-3fx sm |
| phoenixcontact | fl switch 4008t-2gt-3fx sm firmware |
| phoenixcontact | fl switch 4008t-2gt-4fx sm |
| phoenixcontact | fl switch 4008t-2gt-4fx sm firmware |
| phoenixcontact | fl switch 4008t-2sfp |
| phoenixcontact | fl switch 4008t-2sfp firmware |
| phoenixcontact | fl switch 4808e-16fx lc-4gc |
| phoenixcontact | fl switch 4808e-16fx lc-4gc firmware |
| phoenixcontact | fl switch 4808e-16fx sm st-4gc |
| phoenixcontact | fl switch 4808e-16fx sm st-4gc firmware |
| phoenixcontact | fl switch 4808e-16fx sm-4gc |
| phoenixcontact | fl switch 4808e-16fx sm-4gc firmware |
| phoenixcontact | fl switch 4808e-16fx st-4gc |
| phoenixcontact | fl switch 4808e-16fx st-4gc firmware |
References
→ the Explorer · watch your stack · NVD