PT-2019-9017

CVE-2018-13994

·

Published

2019-05-07

·

Updated

2019-10-09

Description by

CVSS 3.1
7.5
High
MetricsAC:L/AV:N/A:H/C:N/I:N/PR:N/S:U/UI:N
Name of the Vulnerable Software and Affected Versions PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 through 1.34
Description The WebUI of the affected device is susceptible to a denial-of-service attack. This can be achieved by establishing more than 120 connections.
Recommendations For versions 1.0 through 1.34, consider restricting the number of connections to the WebUI to prevent denial-of-service attacks. As a temporary workaround, limit the number of concurrent connections to mitigate the risk of exploitation.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾