CVE-2017-16743

https://notcve.org/view.php?id=CVE-2017-16743

12 Jan 2018 — An Improper Authorization issue was discovered in PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, and 48xxx Series products running firmware Version 1.0 to 1.32. A remote unauthenticated attacker may be able to craft special HTTP requests allowing an attacker to bypass web-service authentication allowing the attacker to obtain administrative privileges on the device. Se ha descubierto un problema de autorización indebida en productos PHOENIX CONTACT FL SWITCH 3xxx, 4xxx y 48xxx Series que ejecutan las versiones de fi... • https://cert.vde.com/en-us/advisories/vde-2017-006 • CWE-285: Improper Authorization CWE-863: Incorrect Authorization •