CVE-2018-10730
9.1
CRITICAL · CVSS 3.0 · EPSS 4.5% (pctl 91)
In your normal cycle
Critical by CVSS (9.1), but no sign of active exploitation.
Description
All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to OS command injection.
Scoring
| CVSS | 9.1 (CRITICAL, v3.0) |
|---|---|
| Vector | CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H |
| EPSS | 4.5% — more likely to be exploited than 91% of all CVEs |
| Weakness | CWE-78 |
| On CISA KEV | no |
| Public exploit | none known |
| Published | 2018-05-17 |
| Last modified | 2026-06-17 |
Affected (40)
| Vendor | Product |
|---|---|
| phoenixcontact | fl switch 3004t-fx |
| phoenixcontact | fl switch 3004t-fx firmware |
| phoenixcontact | fl switch 3004t-fx st |
| phoenixcontact | fl switch 3004t-fx st firmware |
| phoenixcontact | fl switch 3005 |
| phoenixcontact | fl switch 3005 firmware |
| phoenixcontact | fl switch 3005t |
| phoenixcontact | fl switch 3005t firmware |
| phoenixcontact | fl switch 3006t-2fx |
| phoenixcontact | fl switch 3006t-2fx firmware |
| phoenixcontact | fl switch 3006t-2fx sm |
| phoenixcontact | fl switch 3006t-2fx sm firmware |
| phoenixcontact | fl switch 3006t-2fx st |
| phoenixcontact | fl switch 3006t-2fx st firmware |
| phoenixcontact | fl switch 3008 |
| phoenixcontact | fl switch 3008 firmware |
| phoenixcontact | fl switch 3008t |
| phoenixcontact | fl switch 3008t firmware |
| phoenixcontact | fl switch 3012e-2sfx |
| phoenixcontact | fl switch 3012e-2sfx firmware |
| phoenixcontact | fl switch 3016 |
| phoenixcontact | fl switch 3016 firmware |
| phoenixcontact | fl switch 3016e |
| phoenixcontact | fl switch 3016e firmware |
| phoenixcontact | fl switch 3016t |
| phoenixcontact | fl switch 3016t firmware |
| phoenixcontact | fl switch 4008t-2gt-3fx sm |
| phoenixcontact | fl switch 4008t-2gt-3fx sm firmware |
| phoenixcontact | fl switch 4008t-2gt-4fx sm |
| phoenixcontact | fl switch 4008t-2gt-4fx sm firmware |
| phoenixcontact | fl switch 4008t-2sfp |
| phoenixcontact | fl switch 4008t-2sfp firmware |
| phoenixcontact | fl switch 4808e-16fx lc-4gc |
| phoenixcontact | fl switch 4808e-16fx lc-4gc firmware |
| phoenixcontact | fl switch 4808e-16fx sm st-4gc |
| phoenixcontact | fl switch 4808e-16fx sm st-4gc firmware |
| phoenixcontact | fl switch 4808e-16fx sm-4gc |
| phoenixcontact | fl switch 4808e-16fx sm-4gc firmware |
| phoenixcontact | fl switch 4808e-16fx st-4gc |
| phoenixcontact | fl switch 4808e-16fx st-4gc firmware |
References
→ the Explorer · watch your stack · NVD