QwikSec

Security Database

CVE

CWE

Training

CVE-2017-16743

Published: Jan 12, 2018

Modified: Aug 5, 2024

PUBLISHED

Description

An Improper Authorization issue was discovered in PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, and 48xxx Series products running firmware Version 1.0 to 1.32. A remote unauthenticated attacker may be able to craft special HTTP requests allowing an attacker to bypass web-service authentication allowing the attacker to obtain administrative privileges on the device.

Vendor	Product	Versions
n/a	PHOENIX CONTACT FL SWITCH	affected `PHOENIX CONTACT FL SWITCH`

Weaknesses (CWE)

References

https://cert.vde.com/en-us/advisories/vde-2017-006

x_refsource_CONFIRM

https://ics-cert.us-cert.gov/advisories/ICSA-18-011-03

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.