Approved changes feed: RSS · Atom

cpe:2.3:h:phoenixcontact:fl_switch_3008:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorPhoenixcontact (ad43784c-598b-51b1-a640-9cd70ab4c265)
ProductFl Switch 3008 (c1307724-eee5-5f1c-b9d7-02096682fe4a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-13994 not_vulnerable 2026-06-08 05:10:52.528860 Details available
HIGH (7.5)
The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 is vulnerable to a denial-of-service attack by making more than 120 connections.
Published: 2019-05-07T17:36:17.000Z
Updated: 2024-08-05T09:21:40.712Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-13993 not_vulnerable 2026-06-08 05:10:52.526248 Details available
HIGH (8.8)
The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 is prone to CSRF.
Published: 2019-05-07T17:32:25.000Z
Updated: 2024-08-05T09:21:40.827Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-13992 not_vulnerable 2026-06-08 05:10:52.523491 Details available
HIGH (8.2)
The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 allows for plaintext transmission (HTTP) of user credentials by default.
Published: 2019-05-07T17:28:17.000Z
Updated: 2024-08-05T09:21:40.731Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-13991 not_vulnerable 2026-06-08 05:10:52.520217 Details available
MEDIUM (5.3)
The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 leaks private information in firmware images.
Published: 2019-05-07T17:24:24.000Z
Updated: 2024-08-05T09:21:40.924Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-13990 not_vulnerable 2026-06-08 05:10:52.494121 Details available
HIGH (8.6)
The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions prior to 1.35 is vulnerable to brute-force attacks, because of Improper Restriction of Excessive Authentication Attempts.
Published: 2019-05-06T18:47:16.000Z
Updated: 2024-08-05T09:21:40.970Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-10731 not_vulnerable 2026-06-08 05:10:37.021421 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-10730 not_vulnerable 2026-06-08 05:10:37.018872 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-10729 not_vulnerable 2026-06-08 05:10:37.016298 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-10728 not_vulnerable 2026-06-08 05:10:36.987386 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16743 not_vulnerable 2026-06-08 05:09:01.012323 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16741 not_vulnerable 2026-06-08 05:09:00.985510 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.