CVE-2018-13990

HIGH

PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx < 1.35 - Improper Restriction of Excessive Authentication Attempts

Title source: llm

Description

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions prior to 1.35 is vulnerable to brute-force attacks, because of Improper Restriction of Excessive Authentication Attempts.

References (2)

Core 2

Core References

Third Party Advisory, US Government Resource x_refsource_misc

https://ics-cert.us-cert.gov/advisories/ICSA-19-024-02

Third Party Advisory, VDB Entry x_refsource_misc

http://www.securityfocus.com/bid/106737

Scores

CVSS v3 8.6

EPSS 0.0231

EPSS Percentile 81.3%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

Details

CWE

CWE-287

Status published

Products (29)

phoenixcontact/fl_switch_3004t-fx_firmware < 1.35

phoenixcontact/fl_switch_3004t-fx_st_firmware < 1.35

phoenixcontact/fl_switch_3005_firmware < 1.35

phoenixcontact/fl_switch_3005t_firmware < 1.35

phoenixcontact/fl_switch_3006t-2fx_firmware < 1.35

phoenixcontact/fl_switch_3006t-2fx_sm_firmware < 1.35

phoenixcontact/fl_switch_3006t-2fx_st_firmware < 1.35

phoenixcontact/fl_switch_3008_firmware < 1.35

phoenixcontact/fl_switch_3008t_firmware < 1.35

phoenixcontact/fl_switch_3012e-2fx_sm_firmware < 1.35

... and 19 more

Published May 06, 2019

Tracked Since Feb 18, 2026