PT-2018-1518

CVE-2018-10731

·

Published

2018-02-22

·

Updated

2018-06-20

Description by

CVSS 3.1
9.3
Critical
MetricsAV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Phoenix Contact FL SWITCH versions 1.0 through 1.33
Description The issue is caused by a buffer overflow in the device's memory, allowing a remote attacker to gain unauthorized access to the device's OS files and execute arbitrary code. The estimated number of potentially affected devices worldwide is not specified.
Recommendations For versions 1.0 through 1.33, update the firmware to a version that is not affected by this issue. As a temporary workaround, consider restricting access to the device to minimize the risk of exploitation.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾