CVE-2017-16743

An Improper Authorization issue was discovered in PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, and 48xxx Series products running firmware Version 1.0 to 1.32. A remote unauthenticated attacker may be able to craft special HTTP requests allowing an attacker to bypass web-service authentication allowing the attacker to obtain administrative privileges on the device.
References
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_3005_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_3005:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_3005t_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_3005t:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_3004t-fx_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_3004t-fx:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_3004t-fx_st_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_3004t-fx_st:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_3008_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_3008:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_3008t_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_3008t:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_3006t-2fx_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_3006t-2fx:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_3006t-2fx_st_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_3006t-2fx_st:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_3012e-2sfx_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_3012e-2sfx:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_3016e_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_3016e:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_3016_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_3016:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_3016t_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_3016t:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_3006t-2fx_sm_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_3006t-2fx_sm:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_4008t-2sfp_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_4008t-2sfp:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_4008t-2gt-4fx_sm_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_4008t-2gt-4fx_sm:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_4008t-2gt-3fx_sm_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_4008t-2gt-3fx_sm:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_4808e-16fx_lc-4gc_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_4808e-16fx_lc-4gc:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_4808e-16fx_sm-4gc_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_4808e-16fx_sm-4gc:-:*:*:*:*:*:*:*

Configuration 19 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_4808e-16fx_sm_st-4gc_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_4808e-16fx_sm_st-4gc:-:*:*:*:*:*:*:*

Configuration 20 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_4808e-16fx_st-4gc_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_4808e-16fx_st-4gc:-:*:*:*:*:*:*:*

Configuration 21 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_4808e-16fx-4gc_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_4808e-16fx-4gc:-:*:*:*:*:*:*:*

Configuration 22 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_4808e-16fx_sm_lc-4gc_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_4808e-16fx_sm_lc-4gc:-:*:*:*:*:*:*:*

Configuration 23 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_4012t_2gt_2fx_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_4012t_2gt_2fx:-:*:*:*:*:*:*:*

Configuration 24 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_4012t-2gt-2fx_st_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_4012t-2gt-2fx_st:-:*:*:*:*:*:*:*

Configuration 25 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_4824e-4gc_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_4824e-4gc:-:*:*:*:*:*:*:*

Configuration 26 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_4800e-24fx-4gc_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_4800e-24fx-4gc:-:*:*:*:*:*:*:*

Configuration 27 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_4800e-24fx_sm-4gc_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_4800e-24fx_sm-4gc:-:*:*:*:*:*:*:*

Configuration 28 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_4800e-24fx_sm-4gc_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_4800e-24fx_sm-4gc:-:*:*:*:*:*:*:*

Configuration 29 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_3012e-2fx_sm_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_3012e-2fx_sm:-:*:*:*:*:*:*:*

Configuration 30 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_4000t-8poe-2sfp-r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_4000t-8poe-2sfp-r:-:*:*:*:*:*:*:*

Information

Published : 2018-01-12 12:29

Updated : 2019-10-02 17:03


NVD link : CVE-2017-16743

Mitre link : CVE-2017-16743


JSON object : View

CWE
CWE-863

Incorrect Authorization

Advertisement

dedicated server usa

Products Affected

phoenixcontact

  • fl_switch_3006t-2fx
  • fl_switch_3005_firmware
  • fl_switch_4008t-2sfp_firmware
  • fl_switch_4808e-16fx_lc-4gc
  • fl_switch_3012e-2fx_sm
  • fl_switch_4808e-16fx-4gc
  • fl_switch_3008_firmware
  • fl_switch_3006t-2fx_st
  • fl_switch_3006t-2fx_sm
  • fl_switch_4808e-16fx_sm-4gc_firmware
  • fl_switch_4824e-4gc
  • fl_switch_3004t-fx_firmware
  • fl_switch_3016e_firmware
  • fl_switch_4008t-2gt-4fx_sm
  • fl_switch_4808e-16fx_st-4gc
  • fl_switch_3016_firmware
  • fl_switch_4012t-2gt-2fx_st
  • fl_switch_3004t-fx_st
  • fl_switch_4808e-16fx_sm_st-4gc
  • fl_switch_4000t-8poe-2sfp-r
  • fl_switch_3012e-2sfx
  • fl_switch_4800e-24fx_sm-4gc_firmware
  • fl_switch_3008t_firmware
  • fl_switch_4808e-16fx_sm_lc-4gc
  • fl_switch_3012e-2sfx_firmware
  • fl_switch_3006t-2fx_firmware
  • fl_switch_4808e-16fx_st-4gc_firmware
  • fl_switch_3012e-2fx_sm_firmware
  • fl_switch_4012t_2gt_2fx
  • fl_switch_3006t-2fx_st_firmware
  • fl_switch_4008t-2sfp
  • fl_switch_3016
  • fl_switch_4824e-4gc_firmware
  • fl_switch_3016t_firmware
  • fl_switch_4800e-24fx-4gc_firmware
  • fl_switch_3008t
  • fl_switch_4808e-16fx-4gc_firmware
  • fl_switch_4808e-16fx_sm_lc-4gc_firmware
  • fl_switch_4008t-2gt-3fx_sm_firmware
  • fl_switch_4808e-16fx_lc-4gc_firmware
  • fl_switch_4808e-16fx_sm_st-4gc_firmware
  • fl_switch_3005t_firmware
  • fl_switch_4000t-8poe-2sfp-r_firmware
  • fl_switch_3005t
  • fl_switch_3006t-2fx_sm_firmware
  • fl_switch_4012t_2gt_2fx_firmware
  • fl_switch_4800e-24fx-4gc
  • fl_switch_3016e
  • fl_switch_3008
  • fl_switch_3016t
  • fl_switch_4008t-2gt-4fx_sm_firmware
  • fl_switch_3004t-fx
  • fl_switch_3005
  • fl_switch_4008t-2gt-3fx_sm
  • fl_switch_4800e-24fx_sm-4gc
  • fl_switch_4012t-2gt-2fx_st_firmware
  • fl_switch_3004t-fx_st_firmware
  • fl_switch_4808e-16fx_sm-4gc