FKIE_CVE-2018-13992

Vulnerability from fkie_nvd - Published: 2019-05-07 18:29 - Updated: 2024-11-21 03:48
Summary
The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 allows for plaintext transmission (HTTP) of user credentials by default.
Impacted products
Vendor Product Version
phoenixcontact fl_switch_3005_firmware *
phoenixcontact fl_switch_3005 -
phoenixcontact fl_switch_3005t_firmware *
phoenixcontact fl_switch_3005t -
phoenixcontact fl_switch_3004t-fx_firmware *
phoenixcontact fl_switch_3004t-fx -
phoenixcontact fl_switch_3004t-fx_st_firmware *
phoenixcontact fl_switch_3004t-fx_st -
phoenixcontact fl_switch_3008_firmware *
phoenixcontact fl_switch_3008 -
phoenixcontact fl_switch_3008t_firmware *
phoenixcontact fl_switch_3008t -
phoenixcontact fl_switch_3006t-2fx_firmware *
phoenixcontact fl_switch_3006t-2fx -
phoenixcontact fl_switch_3006t-2fx_st_firmware *
phoenixcontact fl_switch_3006t-2fx_st -
phoenixcontact fl_switch_3012e-2sfx_firmware *
phoenixcontact fl_switch_3012e-2sfx -
phoenixcontact fl_switch_3016e_firmware *
phoenixcontact fl_switch_3016e -
phoenixcontact fl_switch_3016_firmware *
phoenixcontact fl_switch_3016 -
phoenixcontact fl_switch_3016t_firmware *
phoenixcontact fl_switch_3016t -
phoenixcontact fl_switch_3006t-2fx_sm_firmware *
phoenixcontact fl_switch_3006t-2fx_sm -
phoenixcontact fl_switch_4008t-2sfp_firmware *
phoenixcontact fl_switch_4008t-2sfp -
phoenixcontact fl_switch_4008t-2gt-4fx_sm_firmware *
phoenixcontact fl_switch_4008t-2gt-4fx_sm -
phoenixcontact fl_switch_4008t-2gt-3fx_sm_firmware *
phoenixcontact fl_switch_4008t-2gt-3fx_sm -
phoenixcontact fl_switch_4808e-16fx_lc-4gc_firmware *
phoenixcontact fl_switch_4808e-16fx_lc-4gc -
phoenixcontact fl_switch_4808e-16fx_sm-4gc_firmware *
phoenixcontact fl_switch_4808e-16fx_sm-4gc -
phoenixcontact fl_switch_4808e-16fx_sm_st-4gc_firmware *
phoenixcontact fl_switch_4808e-16fx_sm_st-4gc -
phoenixcontact fl_switch_4808e-16fx_st-4gc_firmware *
phoenixcontact fl_switch_4808e-16fx_st-4gc -
phoenixcontact fl_switch_4808e-16fx-4gc_firmware *
phoenixcontact fl_switch_4808e-16fx-4gc -
phoenixcontact fl_switch_4808e-16fx_sm_lc-4gc_firmware *
phoenixcontact fl_switch_4808e-16fx_sm_lc-4gc -
phoenixcontact fl_switch_4012t_2gt_2fx_firmware *
phoenixcontact fl_switch_4012t_2gt_2fx -
phoenixcontact fl_switch_4012t-2gt-2fx_st_firmware *
phoenixcontact fl_switch_4012t-2gt-2fx_st -
phoenixcontact fl_switch_4824e-4gc_firmware *
phoenixcontact fl_switch_4824e-4gc -
phoenixcontact fl_switch_4800e-24fx-4gc_firmware *
phoenixcontact fl_switch_4800e-24fx-4gc -
phoenixcontact fl_switch_4800e-24fx_sm-4gc_firmware *
phoenixcontact fl_switch_4800e-24fx_sm-4gc -
phoenixcontact fl_switch_3012e-2fx_sm_firmware *
phoenixcontact fl_switch_3012e-2fx_sm -
phoenixcontact fl_switch_4000t-8poe-2sfp-r_firmware *
phoenixcontact fl_switch_4000t-8poe-2sfp-r -

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:phoenixcontact:fl_switch_3005_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "5838F198-4CCB-455A-A955-83263F78356A",
              "versionEndIncluding": "1.34",
              "versionStartExcluding": "1.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:phoenixcontact:fl_switch_3005:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "CDD6E20C-23E3-4D04-879B-2AC6EF428947",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:phoenixcontact:fl_switch_3005t_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "A044EFDC-2F7F-4B07-AD3F-2C3085AD499B",
              "versionEndIncluding": "1.34",
              "versionStartIncluding": "1.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:phoenixcontact:fl_switch_3005t:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "378D94CF-D885-42D4-8A0E-21CD748F6807",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:phoenixcontact:fl_switch_3004t-fx_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "17E9343C-8760-439D-9E4B-3D6CCA4E2819",
              "versionEndIncluding": "1.34",
              "versionStartIncluding": "1.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:phoenixcontact:fl_switch_3004t-fx:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "DA9C98D8-21D3-45C1-B060-A9A9E2F3C097",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:phoenixcontact:fl_switch_3004t-fx_st_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C63BBDE7-162C-4E1F-B95C-A96D75B6534D",
              "versionEndIncluding": "1.34",
              "versionStartIncluding": "1.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:phoenixcontact:fl_switch_3004t-fx_st:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "7741E125-4A42-49D9-B042-F9CE55635AAC",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:phoenixcontact:fl_switch_3008_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "AC486493-C679-491D-85C3-65778974F619",
              "versionEndIncluding": "1.34",
              "versionStartIncluding": "1.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:phoenixcontact:fl_switch_3008:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "5B6CE354-013E-4F95-BC30-1C9B319EBED2",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:phoenixcontact:fl_switch_3008t_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "1F287862-E23E-4A75-A678-7498C5319C67",
              "versionEndIncluding": "1.34",
              "versionStartIncluding": "1.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:phoenixcontact:fl_switch_3008t:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9AABEF33-10A0-4799-B838-56EDD19DA0C0",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:phoenixcontact:fl_switch_3006t-2fx_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "066EBCFD-A38E-4CC1-874C-76438F2BBFD2",
              "versionEndIncluding": "1.34",
              "versionStartIncluding": "1.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:phoenixcontact:fl_switch_3006t-2fx:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "183345F0-1A43-4721-99C1-6F1A7DF951C5",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:phoenixcontact:fl_switch_3006t-2fx_st_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "A709134E-8108-46D5-87B6-B8EFAFC46A57",
              "versionEndIncluding": "1.34",
              "versionStartIncluding": "1.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:phoenixcontact:fl_switch_3006t-2fx_st:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "745B393D-B1D4-49B3-B869-54B103DDC09E",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:phoenixcontact:fl_switch_3012e-2sfx_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "BF6F59B4-D27B-47BD-9245-113AE40975D4",
              "versionEndIncluding": "1.34",
              "versionStartIncluding": "1.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:phoenixcontact:fl_switch_3012e-2sfx:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4E73E8DE-CCC4-43EC-8DD5-B8F75EA06A79",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:phoenixcontact:fl_switch_3016e_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "EA7DFECE-5FD0-426C-A8AD-8FD76DF2686C",
              "versionEndIncluding": "1.34",
              "versionStartIncluding": "1.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:phoenixcontact:fl_switch_3016e:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "AAE50CC4-384B-499F-BC7D-E66AB2B8D42F",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:phoenixcontact:fl_switch_3016_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F332F2A6-4ADC-44E1-8992-E8EA6439C1F7",
              "versionEndIncluding": "1.34",
              "versionStartIncluding": "1.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:phoenixcontact:fl_switch_3016:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "BE5BBAFE-2229-4472-BED8-30A5A2547746",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:phoenixcontact:fl_switch_3016t_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "AB5CA5AA-1388-4718-8A1E-7A84A015A3C9",
              "versionEndIncluding": "1.34",
              "versionStartIncluding": "1.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:phoenixcontact:fl_switch_3016t:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "20E4B7B8-0BCF-4A6D-A1D6-D76D7B67277D",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:phoenixcontact:fl_switch_3006t-2fx_sm_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2304E00B-6927-47CD-B8F9-5737C4DFEE0F",
              "versionEndIncluding": "1.34",
              "versionStartIncluding": "1.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:phoenixcontact:fl_switch_3006t-2fx_sm:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "94001A55-C569-4FD3-BB74-9EC7D85C1473",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:phoenixcontact:fl_switch_4008t-2sfp_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "AFB27CA8-DD29-47D0-ABF8-0749CCD54C1B",
              "versionEndIncluding": "1.34",
              "versionStartIncluding": "1.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:phoenixcontact:fl_switch_4008t-2sfp:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8BDDB1D7-3E0C-4C06-B19F-A2FE8F6CC541",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:phoenixcontact:fl_switch_4008t-2gt-4fx_sm_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "5425DCC2-8DFA-45E4-B772-B86787D1D84E",
              "versionEndIncluding": "1.34",
              "versionStartIncluding": "1.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:phoenixcontact:fl_switch_4008t-2gt-4fx_sm:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "FB83F75C-61AD-4161-B7FC-815BB79DD84C",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:phoenixcontact:fl_switch_4008t-2gt-3fx_sm_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "473466B5-3D67-497B-8AB5-39987B5A5D88",
              "versionEndIncluding": "1.34",
              "versionStartIncluding": "1.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:phoenixcontact:fl_switch_4008t-2gt-3fx_sm:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "59A8884E-A04E-4A52-9CE6-8EE210F6CA8A",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:phoenixcontact:fl_switch_4808e-16fx_lc-4gc_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "CDC53950-9BEF-4DF8-9C38-4424AC38BDC1",
              "versionEndIncluding": "1.34",
              "versionStartIncluding": "1.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:phoenixcontact:fl_switch_4808e-16fx_lc-4gc:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "7D2ACFB7-4685-48F2-8741-AD0ECFC8804E",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:phoenixcontact:fl_switch_4808e-16fx_sm-4gc_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C284DB89-C9FD-489D-A705-85DFAAEB2661",
              "versionEndIncluding": "1.34",
              "versionStartIncluding": "1.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:phoenixcontact:fl_switch_4808e-16fx_sm-4gc:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "640ECB9C-3D8C-4BCD-A0AF-AA79DE508FD0",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:phoenixcontact:fl_switch_4808e-16fx_sm_st-4gc_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "DC4FBE69-214A-4B71-9573-FCCAA9F296F9",
              "versionEndIncluding": "1.34",
              "versionStartIncluding": "1.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:phoenixcontact:fl_switch_4808e-16fx_sm_st-4gc:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "24767260-220D-40D2-82D4-944DD1557C68",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:phoenixcontact:fl_switch_4808e-16fx_st-4gc_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F7E77B1A-9A78-423B-ADB1-0DE5105012DC",
              "versionEndIncluding": "1.34",
              "versionStartIncluding": "1.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:phoenixcontact:fl_switch_4808e-16fx_st-4gc:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "2D1D7163-5489-47A3-B6DF-13C2C137CD39",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:phoenixcontact:fl_switch_4808e-16fx-4gc_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "D3CA8093-6C61-4E0F-89F2-83008B6A3047",
              "versionEndIncluding": "1.34",
              "versionStartIncluding": "1.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:phoenixcontact:fl_switch_4808e-16fx-4gc:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "DA4CF1D6-AEB2-4A75-959A-81F70FE7A634",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:phoenixcontact:fl_switch_4808e-16fx_sm_lc-4gc_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "64552653-D5D2-4002-A255-68080BA13820",
              "versionEndIncluding": "1.34",
              "versionStartIncluding": "1.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:phoenixcontact:fl_switch_4808e-16fx_sm_lc-4gc:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1A11C522-B022-4F38-9DE9-189BAB367CA6",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:phoenixcontact:fl_switch_4012t_2gt_2fx_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F3F0F169-2BA8-48B7-9017-49993D1B1046",
              "versionEndIncluding": "1.34",
              "versionStartIncluding": "1.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:phoenixcontact:fl_switch_4012t_2gt_2fx:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "BF8A0E7B-0B6D-496C-81A4-077C4D1BA2BA",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:phoenixcontact:fl_switch_4012t-2gt-2fx_st_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "EA7D5CCD-A27A-47B9-898F-D2C605A7E02F",
              "versionEndIncluding": "1.34",
              "versionStartIncluding": "1.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:phoenixcontact:fl_switch_4012t-2gt-2fx_st:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "67F3A41E-72FA-4876-B29C-810A83237E74",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:phoenixcontact:fl_switch_4824e-4gc_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "12C5D49B-B36E-44CE-BDEF-6D092F9F98CC",
              "versionEndIncluding": "1.34",
              "versionStartIncluding": "1.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:phoenixcontact:fl_switch_4824e-4gc:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D0AF48CE-231F-42F9-BF50-B3E8FB49D0F0",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:phoenixcontact:fl_switch_4800e-24fx-4gc_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "6D629743-D62B-446F-9365-9CD4F8D4C7C0",
              "versionEndIncluding": "1.34",
              "versionStartIncluding": "1.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:phoenixcontact:fl_switch_4800e-24fx-4gc:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "5516A419-3B65-4866-91AD-7824C7D93A1E",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:phoenixcontact:fl_switch_4800e-24fx_sm-4gc_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "045FA39D-54C2-4A14-BAE2-4100BE2B9DC9",
              "versionEndIncluding": "1.34",
              "versionStartIncluding": "1.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:phoenixcontact:fl_switch_4800e-24fx_sm-4gc:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E9D8EBCA-D4C9-4698-B0A6-78796228ABD7",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:phoenixcontact:fl_switch_3012e-2fx_sm_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "31B73742-90A2-412E-B31B-0C3968C66735",
              "versionEndIncluding": "1.34",
              "versionStartIncluding": "1.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:phoenixcontact:fl_switch_3012e-2fx_sm:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E13750CC-A1ED-4AC5-BE05-C70B0A8E697D",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:phoenixcontact:fl_switch_4000t-8poe-2sfp-r_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "CE523BC5-9A74-45D1-8054-5AF8E8DC7C6F",
              "versionEndIncluding": "1.34",
              "versionStartIncluding": "1.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:phoenixcontact:fl_switch_4000t-8poe-2sfp-r:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "F5C8DB2C-0647-42FC-A401-264A6A00621E",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 allows for plaintext transmission (HTTP) of user credentials by default."
    },
    {
      "lang": "es",
      "value": "El WebUI de PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versiones 1.0 a 1.34 permite la transmisi\u00f3n de texto plano (HTTP) de las credenciales de usuario por defecto."
    }
  ],
  "id": "CVE-2018-13992",
  "lastModified": "2024-11-21T03:48:23.473",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 5.0,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 8.2,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "LOW",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
          "version": "3.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 4.2,
        "source": "cve@mitre.org",
        "type": "Secondary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2019-05-07T18:29:00.393",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/106737"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "url": "https://ics-cert.us-cert.gov/advisories/ICSA-19-024-02"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/106737"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "url": "https://ics-cert.us-cert.gov/advisories/ICSA-19-024-02"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-311"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…