Description
A command injection vulnerability in the device’s Root CA certificate transfer workflow allows a high-privileged attacker to send crafted HTTP POST requests that result in arbitrary command execution on the underlying Linux OS with root privileges.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Phoenix Contact FL SWITCH 2005
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2008
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2016
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2105
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2108
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2116
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2204-2TC-2SFX
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2205
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2206-2FX
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2206-2FX SM
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2206-2FX SM ST
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2206-2FX ST
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2206-2SFX
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2206-2SFX PN
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2206C-2FX
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2207-FX
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2207-FX SM
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2208
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2208 PN
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2208C
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2212-2TC-2SFX
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2214-2FX
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2214-2FX SM
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2214-2SFX
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2214-2SFX PN
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2216
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2216 PN
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2304-2GC-2SFP
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2306-2SFP
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2306-2SFP PN
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2308
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2308 PN
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2312-2GC-2SFP
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2314-2SFP
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2314-2SFP PN
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2316
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2316 PN
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2404-2TC-2SFX
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2406-2SFX
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2406-2SFX PN
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2408
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2408 PN
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2412-2TC-2SFX
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2414-2SFX
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2414-2SFX PN
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2416
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2416 PN
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2504-2GC-2SFP
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2506-2SFP
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2506-2SFP PN
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2508
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2508 PN
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2512-2GC-2SFP
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2514-2SFP
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2514-2SFP PN
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2516
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2516 PN
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2608
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2608 PN
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2708
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2708 PN
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2303-8SP1
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL NAT 2008
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL NAT 2208
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL NAT 2304-2GC-2SFP
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2008F
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2316/K1
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2506-2SFP/K1
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 2508/K1
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH TSN 2316
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH TSN 2312-2GC-2SFP
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH TSN 2314-2SFP
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 5924-4GC
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 5916-8GC-4SFP+
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 5924SFP-4GC
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 5924-4SFP+
Default version status: unaffected
0.0.0 to < 3.53affected
Phoenix Contact FL SWITCH 5916SFP-8GC-4SFP+
Default version status: unaffected
0.0.0 to < 3.53affected