PHOENIX CONTACT FL SWITCH

Risk Summary

Successful exploitation of these vulnerabilities may allow attackers to have user privileges, gain access to the switch, read user credentials, deny access to the switch, or perform man-in-the-middle attacks.

CVEs (6)

Remediations

• Phoenix Contact recommends that users of FL SWITCH devices with affected firmware versions update the firmware to Version 1.35 or higher, which fixes these vulnerabilities. The updated firmware may be downloaded from the managed switch product page on the Phoenix Contact website. Please see the CERT VDE advisory for these vulnerabilities for the location of the new firmware download for each specific product: https://cert.vde.com/de-de/advisories/vde-2019-001
• Phoenix Contact also recommends that users using the Phoenix Contact managed FL SWITCH devices enable HTTP security.

Affected Vendors

Affected Products (1)

Affected Sectors

Communications, Critical Manufacturing, Information Technology