8.1
CVE-2018-10728
- EPSS 1.38%
- Published 17.05.2018 19:29:00
- Last modified 21.11.2024 03:41:56
- Source cve@mitre.org
- Teams watchlist Login
- Open Login
All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to buffer overflows (a different vulnerability than CVE-2018-10731).
Data is provided by the National Vulnerability Database (NVD)
Phoenixcontact ≫ Fl Switch 3005 Firmware Version > 1.0 <= 1.33
Phoenixcontact ≫ Fl Switch 3005t Firmware Version >= 1.0 <= 1.33
Phoenixcontact ≫ Fl Switch 3004t-fx Firmware Version >= 1.0 <= 1.33
Phoenixcontact ≫ Fl Switch 3004t-fx St Firmware Version >= 1.0 <= 1.33
Phoenixcontact ≫ Fl Switch 3008 Firmware Version >= 1.0 <= 1.33
Phoenixcontact ≫ Fl Switch 3008t Firmware Version >= 1.0 <= 1.33
Phoenixcontact ≫ Fl Switch 3006t-2fx Firmware Version >= 1.0 <= 1.33
Phoenixcontact ≫ Fl Switch 3006t-2fx St Firmware Version >= 1.0 <= 1.33
Phoenixcontact ≫ Fl Switch 3012e-2sfx Firmware Version >= 1.0 <= 1.33
Phoenixcontact ≫ Fl Switch 3016e Firmware Version >= 1.0 <= 1.33
Phoenixcontact ≫ Fl Switch 3016 Firmware Version >= 1.0 <= 1.33
Phoenixcontact ≫ Fl Switch 3016t Firmware Version >= 1.0 <= 1.33
Phoenixcontact ≫ Fl Switch 3006t-2fx Sm Firmware Version >= 1.0 <= 1.33
Phoenixcontact ≫ Fl Switch 4008t-2sfp Firmware Version >= 1.0 <= 1.33
Phoenixcontact ≫ Fl Switch 4008t-2gt-4fx Sm Firmware Version >= 1.0 <= 1.33
Phoenixcontact ≫ Fl Switch 4008t-2gt-3fx Sm Firmware Version >= 1.0 <= 1.33
Phoenixcontact ≫ Fl Switch 4808e-16fx Lc-4gc Firmware Version >= 1.0 <= 1.33
Phoenixcontact ≫ Fl Switch 4808e-16fx Sm-4gc Firmware Version >= 1.0 <= 1.33
Phoenixcontact ≫ Fl Switch 4808e-16fx Sm St-4gc Firmware Version >= 1.0 <= 1.33
Phoenixcontact ≫ Fl Switch 4808e-16fx St-4gc Firmware Version >= 1.0 <= 1.33
Phoenixcontact ≫ Fl Switch 4808e-16fx-4gc Firmware Version >= 1.0 <= 1.33
Phoenixcontact ≫ Fl Switch 4808e-16fx Sm Lc-4gc Firmware Version >= 1.0 <= 1.33
Phoenixcontact ≫ Fl Switch 4012t 2gt 2fx Firmware Version >= 1.0 <= 1.33
Phoenixcontact ≫ Fl Switch 4012t-2gt-2fx St Firmware Version >= 1.0 <= 1.33
Phoenixcontact ≫ Fl Switch 4824e-4gc Firmware Version >= 1.0 <= 1.33
Phoenixcontact ≫ Fl Switch 4800e-24fx-4gc Firmware Version >= 1.0 <= 1.33
Phoenixcontact ≫ Fl Switch 4800e-24fx Sm-4gc Firmware Version >= 1.0 <= 1.33
Phoenixcontact ≫ Fl Switch 3012e-2fx Sm Firmware Version >= 1.0 <= 1.33
Phoenixcontact ≫ Fl Switch 4000t-8poe-2sfp-r Firmware Version >= 1.0 <= 1.33
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.38% | 0.795 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 8.1 | 2.2 | 5.9 |
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 6.8 | 8.6 | 6.4 |
AV:N/AC:M/Au:N/C:P/I:P/A:P
|
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.