Description
In Phoenix Contact FL SWITCH Series 2xxx in version 3.00 an incorrect privilege assignment allows an low privileged user to enable full access to the device configuration.
Published: 2022-02-02
Score: 8.8 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

Vendor Solution

Upgrade to firmware 3.10 or higher


Vendor Workaround

Disable login via SSH on devices running firmware 3.00

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2022-27655 In Phoenix Contact FL SWITCH Series 2xxx in version 3.00 an incorrect privilege assignment allows an low privileged user to enable full access to the device configuration.
History

No history.

Subscriptions

Phoenixcontact Fl Switch 2005 Fl Switch 2005 Firmware Fl Switch 2008 Fl Switch 2008 Firmware Fl Switch 2008f Fl Switch 2008f Firmware Fl Switch 2016 Fl Switch 2016 Firmware Fl Switch 2105 Fl Switch 2105 Firmware Fl Switch 2108 Fl Switch 2108 Firmware Fl Switch 2116 Fl Switch 2116 Firmware Fl Switch 2204-2tc-2sfx Fl Switch 2204-2tc-2sfx Firmware Fl Switch 2205 Fl Switch 2205 Firmware Fl Switch 2206-2fx Fl Switch 2206-2fx Firmware Fl Switch 2206-2fx Sm Fl Switch 2206-2fx Sm Firmware Fl Switch 2206-2fx Sm St Fl Switch 2206-2fx Sm St Firmware Fl Switch 2206-2fx St Fl Switch 2206-2fx St Firmware Fl Switch 2206-2sfx Fl Switch 2206-2sfx Firmware Fl Switch 2206-2sfx Pn Fl Switch 2206-2sfx Pn Firmware Fl Switch 2206c-2fx Fl Switch 2206c-2fx Firmware Fl Switch 2207-fx Fl Switch 2207-fx Firmware Fl Switch 2207-fx Sm Fl Switch 2207-fx Sm Firmware Fl Switch 2208 Fl Switch 2208 Firmware Fl Switch 2208 Pn Fl Switch 2208 Pn Firmware Fl Switch 2208c Fl Switch 2208c Firmware Fl Switch 2212-2tc-2sfx Fl Switch 2212-2tc-2sfx Firmware Fl Switch 2214-2fx Fl Switch 2214-2fx Firmware Fl Switch 2214-2fx Sm Fl Switch 2214-2fx Sm Firmware Fl Switch 2214-2sfx Fl Switch 2214-2sfx Firmware Fl Switch 2214-2sfx Pn Fl Switch 2214-2sfx Pn Firmware Fl Switch 2216 Fl Switch 2216 Firmware Fl Switch 2216 Pn Fl Switch 2216 Pn Firmware Fl Switch 2304-2gc-2sfp Fl Switch 2304-2gc-2sfp Firmware Fl Switch 2306-2sfp Fl Switch 2306-2sfp Firmware Fl Switch 2306-2sfp Pn Fl Switch 2306-2sfp Pn Firmware Fl Switch 2308 Fl Switch 2308 Firmware Fl Switch 2308 Pn Fl Switch 2308 Pn Firmware Fl Switch 2312-2gc-2sfp Fl Switch 2312-2gc-2sfp Firmware Fl Switch 2314-2sfp Fl Switch 2314-2sfp Firmware Fl Switch 2314-2sfp Pn Fl Switch 2314-2sfp Pn Firmware Fl Switch 2316 Fl Switch 2316\/k1 Fl Switch 2316\/k1 Firmware Fl Switch 2316 Firmware Fl Switch 2316 Pn Fl Switch 2316 Pn Firmware Fl Switch 2404-2tc-2sfx Fl Switch 2404-2tc-2sfx Firmware Fl Switch 2406-2sfx Fl Switch 2406-2sfx Firmware Fl Switch 2406-2sfx Pn Fl Switch 2406-2sfx Pn Firmware Fl Switch 2408 Fl Switch 2408 Firmware Fl Switch 2408 Pn Fl Switch 2408 Pn Firmware Fl Switch 2412-2tc-2sfx Fl Switch 2412-2tc-2sfx Firmware Fl Switch 2414-2sfx Fl Switch 2414-2sfx Firmware Fl Switch 2414-2sfx Pn Fl Switch 2414-2sfx Pn Firmware Fl Switch 2416 Fl Switch 2416 Firmware Fl Switch 2416 Pn Fl Switch 2416 Pn Firmware Fl Switch 2504-2gc-2sfp Fl Switch 2504-2gc-2sfp Firmware Fl Switch 2506-2sfp Fl Switch 2506-2sfp\/k1 Fl Switch 2506-2sfp\/k1 Firmware Fl Switch 2506-2sfp Firmware Fl Switch 2506-2sfp Pn Fl Switch 2506-2sfp Pn Firmware Fl Switch 2508 Fl Switch 2508\/k1 Fl Switch 2508\/k1 Firmware Fl Switch 2508 Firmware Fl Switch 2508 Pn Fl Switch 2508 Pn Firmware Fl Switch 2512-2gc-2sfp Fl Switch 2512-2gc-2sfp Firmware Fl Switch 2514-2sfp Fl Switch 2514-2sfp Firmware Fl Switch 2514-2sfp Pn Fl Switch 2514-2sfp Pn Firmware Fl Switch 2516 Fl Switch 2516 Firmware Fl Switch 2516 Pn Fl Switch 2516 Pn Firmware Fl Switch 2608 Fl Switch 2608 Firmware Fl Switch 2608 Pn Fl Switch 2608 Pn Firmware Fl Switch 2708 Fl Switch 2708 Firmware Fl Switch 2708 Pn Fl Switch 2708 Pn Firmware
cve-icon MITRE

Status: PUBLISHED

Assigner: CERTVDE

Published:

Updated: 2024-09-17T01:31:08.892Z

Reserved: 2022-01-03T00:00:00.000Z

Link: CVE-2022-22509

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2022-02-02T13:15:08.407

Modified: 2024-11-21T06:46:55.010

Link: CVE-2022-22509

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses