CVE-2017-16743
Severity Score
9.8
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
An Improper Authorization issue was discovered in PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, and 48xxx Series products running firmware Version 1.0 to 1.32. A remote unauthenticated attacker may be able to craft special HTTP requests allowing an attacker to bypass web-service authentication allowing the attacker to obtain administrative privileges on the device.
Se ha descubierto un problema de autorización indebida en productos PHOENIX CONTACT FL SWITCH 3xxx, 4xxx y 48xxx Series que ejecutan las versiones de firmware 1.0 a 1.32. Un atacante remoto no autenticado podría manipular peticiones HTTP especiales que permiten que un atacante omita la autenticación del servicio web. Esto permitiría que el atacante obtenga privilegios de administrador en el dispositivo.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2017-11-09 CVE Reserved
- 2018-01-12 CVE Published
- 2023-03-07 EPSS Updated
- 2024-08-05 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-285: Improper Authorization
- CWE-863: Incorrect Authorization
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| https://cert.vde.com/en-us/advisories/vde-2017-006 | X_refsource_confirm |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://ics-cert.us-cert.gov/advisories/ICSA-18-011-03 | 2019-10-03 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 3005 Firmware Search vendor "Phoenixcontact" for product "Fl Switch 3005 Firmware" | >= 1.0 <= 1.32 Search vendor "Phoenixcontact" for product "Fl Switch 3005 Firmware" and version " >= 1.0 <= 1.32" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 3005 Search vendor "Phoenixcontact" for product "Fl Switch 3005" | - | - |
Safe
|
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 3005t Firmware Search vendor "Phoenixcontact" for product "Fl Switch 3005t Firmware" | >= 1.0 <= 1.32 Search vendor "Phoenixcontact" for product "Fl Switch 3005t Firmware" and version " >= 1.0 <= 1.32" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 3005t Search vendor "Phoenixcontact" for product "Fl Switch 3005t" | - | - |
Safe
|
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 3004t-fx Firmware Search vendor "Phoenixcontact" for product "Fl Switch 3004t-fx Firmware" | >= 1.0 <= 1.32 Search vendor "Phoenixcontact" for product "Fl Switch 3004t-fx Firmware" and version " >= 1.0 <= 1.32" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 3004t-fx Search vendor "Phoenixcontact" for product "Fl Switch 3004t-fx" | - | - |
Safe
|
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 3004t-fx St Firmware Search vendor "Phoenixcontact" for product "Fl Switch 3004t-fx St Firmware" | >= 1.0 <= 1.32 Search vendor "Phoenixcontact" for product "Fl Switch 3004t-fx St Firmware" and version " >= 1.0 <= 1.32" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 3004t-fx St Search vendor "Phoenixcontact" for product "Fl Switch 3004t-fx St" | - | - |
Safe
|
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 3008 Firmware Search vendor "Phoenixcontact" for product "Fl Switch 3008 Firmware" | >= 1.0 <= 1.32 Search vendor "Phoenixcontact" for product "Fl Switch 3008 Firmware" and version " >= 1.0 <= 1.32" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 3008 Search vendor "Phoenixcontact" for product "Fl Switch 3008" | - | - |
Safe
|
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 3008t Firmware Search vendor "Phoenixcontact" for product "Fl Switch 3008t Firmware" | >= 1.0 <= 1.32 Search vendor "Phoenixcontact" for product "Fl Switch 3008t Firmware" and version " >= 1.0 <= 1.32" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 3008t Search vendor "Phoenixcontact" for product "Fl Switch 3008t" | - | - |
Safe
|
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 3006t-2fx Firmware Search vendor "Phoenixcontact" for product "Fl Switch 3006t-2fx Firmware" | >= 1.0 <= 1.32 Search vendor "Phoenixcontact" for product "Fl Switch 3006t-2fx Firmware" and version " >= 1.0 <= 1.32" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 3006t-2fx Search vendor "Phoenixcontact" for product "Fl Switch 3006t-2fx" | - | - |
Safe
|
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 3006t-2fx St Firmware Search vendor "Phoenixcontact" for product "Fl Switch 3006t-2fx St Firmware" | >= 1.0 <= 1.32 Search vendor "Phoenixcontact" for product "Fl Switch 3006t-2fx St Firmware" and version " >= 1.0 <= 1.32" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 3006t-2fx St Search vendor "Phoenixcontact" for product "Fl Switch 3006t-2fx St" | - | - |
Safe
|
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 3012e-2sfx Firmware Search vendor "Phoenixcontact" for product "Fl Switch 3012e-2sfx Firmware" | >= 1.0 <= 1.32 Search vendor "Phoenixcontact" for product "Fl Switch 3012e-2sfx Firmware" and version " >= 1.0 <= 1.32" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 3012e-2sfx Search vendor "Phoenixcontact" for product "Fl Switch 3012e-2sfx" | - | - |
Safe
|
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 3016e Firmware Search vendor "Phoenixcontact" for product "Fl Switch 3016e Firmware" | >= 1.0 <= 1.32 Search vendor "Phoenixcontact" for product "Fl Switch 3016e Firmware" and version " >= 1.0 <= 1.32" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 3016e Search vendor "Phoenixcontact" for product "Fl Switch 3016e" | - | - |
Safe
|
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 3016 Firmware Search vendor "Phoenixcontact" for product "Fl Switch 3016 Firmware" | >= 1.0 <= 1.32 Search vendor "Phoenixcontact" for product "Fl Switch 3016 Firmware" and version " >= 1.0 <= 1.32" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 3016 Search vendor "Phoenixcontact" for product "Fl Switch 3016" | - | - |
Safe
|
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 3016t Firmware Search vendor "Phoenixcontact" for product "Fl Switch 3016t Firmware" | >= 1.0 <= 1.32 Search vendor "Phoenixcontact" for product "Fl Switch 3016t Firmware" and version " >= 1.0 <= 1.32" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 3016t Search vendor "Phoenixcontact" for product "Fl Switch 3016t" | - | - |
Safe
|
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 3006t-2fx Sm Firmware Search vendor "Phoenixcontact" for product "Fl Switch 3006t-2fx Sm Firmware" | >= 1.0 <= 1.32 Search vendor "Phoenixcontact" for product "Fl Switch 3006t-2fx Sm Firmware" and version " >= 1.0 <= 1.32" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 3006t-2fx Sm Search vendor "Phoenixcontact" for product "Fl Switch 3006t-2fx Sm" | - | - |
Safe
|
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 4008t-2sfp Firmware Search vendor "Phoenixcontact" for product "Fl Switch 4008t-2sfp Firmware" | >= 1.0 <= 1.32 Search vendor "Phoenixcontact" for product "Fl Switch 4008t-2sfp Firmware" and version " >= 1.0 <= 1.32" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 4008t-2sfp Search vendor "Phoenixcontact" for product "Fl Switch 4008t-2sfp" | - | - |
Safe
|
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 4008t-2gt-4fx Sm Firmware Search vendor "Phoenixcontact" for product "Fl Switch 4008t-2gt-4fx Sm Firmware" | >= 1.0 <= 1.32 Search vendor "Phoenixcontact" for product "Fl Switch 4008t-2gt-4fx Sm Firmware" and version " >= 1.0 <= 1.32" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 4008t-2gt-4fx Sm Search vendor "Phoenixcontact" for product "Fl Switch 4008t-2gt-4fx Sm" | - | - |
Safe
|
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 4008t-2gt-3fx Sm Firmware Search vendor "Phoenixcontact" for product "Fl Switch 4008t-2gt-3fx Sm Firmware" | >= 1.0 <= 1.32 Search vendor "Phoenixcontact" for product "Fl Switch 4008t-2gt-3fx Sm Firmware" and version " >= 1.0 <= 1.32" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 4008t-2gt-3fx Sm Search vendor "Phoenixcontact" for product "Fl Switch 4008t-2gt-3fx Sm" | - | - |
Safe
|
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 4808e-16fx Lc-4gc Firmware Search vendor "Phoenixcontact" for product "Fl Switch 4808e-16fx Lc-4gc Firmware" | >= 1.0 <= 1.32 Search vendor "Phoenixcontact" for product "Fl Switch 4808e-16fx Lc-4gc Firmware" and version " >= 1.0 <= 1.32" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 4808e-16fx Lc-4gc Search vendor "Phoenixcontact" for product "Fl Switch 4808e-16fx Lc-4gc" | - | - |
Safe
|
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 4808e-16fx Sm-4gc Firmware Search vendor "Phoenixcontact" for product "Fl Switch 4808e-16fx Sm-4gc Firmware" | >= 1.0 <= 1.32 Search vendor "Phoenixcontact" for product "Fl Switch 4808e-16fx Sm-4gc Firmware" and version " >= 1.0 <= 1.32" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 4808e-16fx Sm-4gc Search vendor "Phoenixcontact" for product "Fl Switch 4808e-16fx Sm-4gc" | - | - |
Safe
|
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 4808e-16fx Sm St-4gc Firmware Search vendor "Phoenixcontact" for product "Fl Switch 4808e-16fx Sm St-4gc Firmware" | >= 1.0 <= 1.32 Search vendor "Phoenixcontact" for product "Fl Switch 4808e-16fx Sm St-4gc Firmware" and version " >= 1.0 <= 1.32" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 4808e-16fx Sm St-4gc Search vendor "Phoenixcontact" for product "Fl Switch 4808e-16fx Sm St-4gc" | - | - |
Safe
|
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 4808e-16fx St-4gc Firmware Search vendor "Phoenixcontact" for product "Fl Switch 4808e-16fx St-4gc Firmware" | >= 1.0 <= 1.32 Search vendor "Phoenixcontact" for product "Fl Switch 4808e-16fx St-4gc Firmware" and version " >= 1.0 <= 1.32" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 4808e-16fx St-4gc Search vendor "Phoenixcontact" for product "Fl Switch 4808e-16fx St-4gc" | - | - |
Safe
|
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 4808e-16fx-4gc Firmware Search vendor "Phoenixcontact" for product "Fl Switch 4808e-16fx-4gc Firmware" | >= 1.0 <= 1.32 Search vendor "Phoenixcontact" for product "Fl Switch 4808e-16fx-4gc Firmware" and version " >= 1.0 <= 1.32" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 4808e-16fx-4gc Search vendor "Phoenixcontact" for product "Fl Switch 4808e-16fx-4gc" | - | - |
Safe
|
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 4808e-16fx Sm Lc-4gc Firmware Search vendor "Phoenixcontact" for product "Fl Switch 4808e-16fx Sm Lc-4gc Firmware" | >= 1.0 <= 1.32 Search vendor "Phoenixcontact" for product "Fl Switch 4808e-16fx Sm Lc-4gc Firmware" and version " >= 1.0 <= 1.32" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 4808e-16fx Sm Lc-4gc Search vendor "Phoenixcontact" for product "Fl Switch 4808e-16fx Sm Lc-4gc" | - | - |
Safe
|
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 4012t 2gt 2fx Firmware Search vendor "Phoenixcontact" for product "Fl Switch 4012t 2gt 2fx Firmware" | >= 1.0 <= 1.32 Search vendor "Phoenixcontact" for product "Fl Switch 4012t 2gt 2fx Firmware" and version " >= 1.0 <= 1.32" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 4012t 2gt 2fx Search vendor "Phoenixcontact" for product "Fl Switch 4012t 2gt 2fx" | - | - |
Safe
|
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 4012t-2gt-2fx St Firmware Search vendor "Phoenixcontact" for product "Fl Switch 4012t-2gt-2fx St Firmware" | >= 1.0 <= 1.32 Search vendor "Phoenixcontact" for product "Fl Switch 4012t-2gt-2fx St Firmware" and version " >= 1.0 <= 1.32" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 4012t-2gt-2fx St Search vendor "Phoenixcontact" for product "Fl Switch 4012t-2gt-2fx St" | - | - |
Safe
|
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 4824e-4gc Firmware Search vendor "Phoenixcontact" for product "Fl Switch 4824e-4gc Firmware" | >= 1.0 <= 1.32 Search vendor "Phoenixcontact" for product "Fl Switch 4824e-4gc Firmware" and version " >= 1.0 <= 1.32" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 4824e-4gc Search vendor "Phoenixcontact" for product "Fl Switch 4824e-4gc" | - | - |
Safe
|
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 4800e-24fx-4gc Firmware Search vendor "Phoenixcontact" for product "Fl Switch 4800e-24fx-4gc Firmware" | >= 1.0 <= 1.32 Search vendor "Phoenixcontact" for product "Fl Switch 4800e-24fx-4gc Firmware" and version " >= 1.0 <= 1.32" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 4800e-24fx-4gc Search vendor "Phoenixcontact" for product "Fl Switch 4800e-24fx-4gc" | - | - |
Safe
|
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 4800e-24fx Sm-4gc Firmware Search vendor "Phoenixcontact" for product "Fl Switch 4800e-24fx Sm-4gc Firmware" | >= 1.0 <= 1.32 Search vendor "Phoenixcontact" for product "Fl Switch 4800e-24fx Sm-4gc Firmware" and version " >= 1.0 <= 1.32" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 4800e-24fx Sm-4gc Search vendor "Phoenixcontact" for product "Fl Switch 4800e-24fx Sm-4gc" | - | - |
Safe
|
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 4800e-24fx Sm-4gc Firmware Search vendor "Phoenixcontact" for product "Fl Switch 4800e-24fx Sm-4gc Firmware" | >= 1.0 <= 1.32 Search vendor "Phoenixcontact" for product "Fl Switch 4800e-24fx Sm-4gc Firmware" and version " >= 1.0 <= 1.32" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 4800e-24fx Sm-4gc Search vendor "Phoenixcontact" for product "Fl Switch 4800e-24fx Sm-4gc" | - | - |
Safe
|
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 3012e-2fx Sm Firmware Search vendor "Phoenixcontact" for product "Fl Switch 3012e-2fx Sm Firmware" | >= 1.0 <= 1.32 Search vendor "Phoenixcontact" for product "Fl Switch 3012e-2fx Sm Firmware" and version " >= 1.0 <= 1.32" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 3012e-2fx Sm Search vendor "Phoenixcontact" for product "Fl Switch 3012e-2fx Sm" | - | - |
Safe
|
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 4000t-8poe-2sfp-r Firmware Search vendor "Phoenixcontact" for product "Fl Switch 4000t-8poe-2sfp-r Firmware" | >= 1.0 <= 1.32 Search vendor "Phoenixcontact" for product "Fl Switch 4000t-8poe-2sfp-r Firmware" and version " >= 1.0 <= 1.32" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch 4000t-8poe-2sfp-r Search vendor "Phoenixcontact" for product "Fl Switch 4000t-8poe-2sfp-r" | - | - |
Safe
|