7.5
CVE-2018-13994
- EPSS 0.43%
- Published 07.05.2019 18:29:00
- Last modified 21.11.2024 03:48:23
- Source cve@mitre.org
- Teams watchlist Login
- Open Login
The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 is vulnerable to a denial-of-service attack by making more than 120 connections.
Data is provided by the National Vulnerability Database (NVD)
Phoenixcontact ≫ Fl Switch 3005 Firmware Version >= 1.0 <= 1.34
Phoenixcontact ≫ Fl Switch 3005t Firmware Version >= 1.0 <= 1.34
Phoenixcontact ≫ Fl Switch 3004t-fx Firmware Version >= 1.0 <= 1.34
Phoenixcontact ≫ Fl Switch 3004t-fx St Firmware Version >= 1.0 <= 1.34
Phoenixcontact ≫ Fl Switch 3008 Firmware Version >= 1.0 <= 1.34
Phoenixcontact ≫ Fl Switch 3008t Firmware Version >= 1.0 <= 1.34
Phoenixcontact ≫ Fl Switch 3006t-2fx Firmware Version >= 1.0 <= 1.34
Phoenixcontact ≫ Fl Switch 3006t-2fx St Firmware Version >= 1.0 <= 1.34
Phoenixcontact ≫ Fl Switch 3012e-2sfx Firmware Version >= 1.0 <= 1.34
Phoenixcontact ≫ Fl Switch 3016e Firmware Version >= 1.0 <= 1.34
Phoenixcontact ≫ Fl Switch 3016 Firmware Version >= 1.0 <= 1.34
Phoenixcontact ≫ Fl Switch 3016t Firmware Version >= 1.0 <= 1.34
Phoenixcontact ≫ Fl Switch 3006t-2fx Sm Firmware Version >= 1.0 <= 1.34
Phoenixcontact ≫ Fl Switch 4008t-2sfp Firmware Version >= 1.0 <= 1.34
Phoenixcontact ≫ Fl Switch 4008t-2gt-4fx Sm Firmware Version >= 1.0 <= 1.34
Phoenixcontact ≫ Fl Switch 4008t-2gt-3fx Sm Firmware Version >= 1.0 <= 1.34
Phoenixcontact ≫ Fl Switch 4808e-16fx Lc-4gc Firmware Version >= 1.0 <= 1.34
Phoenixcontact ≫ Fl Switch 4808e-16fx Sm-4gc Firmware Version >= 1.0 <= 1.34
Phoenixcontact ≫ Fl Switch 4808e-16fx Sm St-4gc Firmware Version >= 1.0 <= 1.34
Phoenixcontact ≫ Fl Switch 4808e-16fx St-4gc Firmware Version >= 1.0 <= 1.34
Phoenixcontact ≫ Fl Switch 4808e-16fx-4gc Firmware Version >= 1.0 <= 1.34
Phoenixcontact ≫ Fl Switch 4808e-16fx Sm Lc-4gc Firmware Version >= 1.0 <= 1.34
Phoenixcontact ≫ Fl Switch 4012t 2gt 2fx Firmware Version >= 1.0 <= 1.34
Phoenixcontact ≫ Fl Switch 4012t-2gt-2fx St Firmware Version >= 1.0 <= 1.34
Phoenixcontact ≫ Fl Switch 4824e-4gc Firmware Version >= 1.0 <= 1.34
Phoenixcontact ≫ Fl Switch 4800e-24fx-4gc Firmware Version >= 1.0 <= 1.34
Phoenixcontact ≫ Fl Switch 4800e-24fx Sm-4gc Firmware Version >= 1.0 <= 1.34
Phoenixcontact ≫ Fl Switch 3012e-2fx Sm Firmware Version >= 1.0 <= 1.34
Phoenixcontact ≫ Fl Switch 4000t-8poe-2sfp-r Firmware Version >= 1.0 <= 1.34
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.43% | 0.593 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 3.9 | 3.6 |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:N/I:N/A:P
|
| cve@mitre.org | 7.5 | 3.9 | 3.6 |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
|
CWE-400 Uncontrolled Resource Consumption
The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.