NetSight
high8.8

CVE-2022-22509

In Phoenix Contact FL SWITCH Series 2xxx in version 3.00 an incorrect privilege assignment allows an low privileged user to enable full access to the device co…

Impact

In Phoenix Contact FL SWITCH Series 2xxx in version 3.00 an incorrect privilege assignment allows an low privileged user to enable full access to the device configuration.

Affected products

VendorProductAffected versions
PhoenixcontactFl Switch 2005 Firmware
Version 3.00
PhoenixcontactFl Switch 2008 Firmware
Version 3.00
PhoenixcontactFl Switch 2008f Firmware
Version 3.00
PhoenixcontactFl Switch 2016 Firmware
Version 3.00
PhoenixcontactFl Switch 2105 Firmware
Version 3.00
PhoenixcontactFl Switch 2108 Firmware
Version 3.00
PhoenixcontactFl Switch 2116 Firmware
Version 3.00
PhoenixcontactFl Switch 2204-2tc-2sfx Firmware
Version 3.00
PhoenixcontactFl Switch 2206-2fx Firmware
Version 3.00
PhoenixcontactFl Switch 2206-2fx Sm Firmware
Version 3.00
PhoenixcontactFl Switch 2206-2fx Sm St Firmware
Version 3.00
PhoenixcontactFl Switch 2206-2fx St Firmware
Version 3.00

Weakness classification

References