CVE-2018-13992

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 allows for plaintext transmission (HTTP) of user credentials by default.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.2 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Affected Products (NVD)
VendorProductVersion
phoenixcontactfl_switch_3005_firmware
1.0 <
𝑥
≤ 1.34
phoenixcontactfl_switch_3005t_firmware
1.0 ≤
𝑥
≤ 1.34
phoenixcontactfl_switch_3004t-fx_firmware
1.0 ≤
𝑥
≤ 1.34
phoenixcontactfl_switch_3004t-fx_st_firmware
1.0 ≤
𝑥
≤ 1.34
phoenixcontactfl_switch_3008_firmware
1.0 ≤
𝑥
≤ 1.34
phoenixcontactfl_switch_3008t_firmware
1.0 ≤
𝑥
≤ 1.34
phoenixcontactfl_switch_3006t-2fx_firmware
1.0 ≤
𝑥
≤ 1.34
phoenixcontactfl_switch_3006t-2fx_st_firmware
1.0 ≤
𝑥
≤ 1.34
phoenixcontactfl_switch_3012e-2sfx_firmware
1.0 ≤
𝑥
≤ 1.34
phoenixcontactfl_switch_3016e_firmware
1.0 ≤
𝑥
≤ 1.34
phoenixcontactfl_switch_3016_firmware
1.0 ≤
𝑥
≤ 1.34
phoenixcontactfl_switch_3016t_firmware
1.0 ≤
𝑥
≤ 1.34
phoenixcontactfl_switch_3006t-2fx_sm_firmware
1.0 ≤
𝑥
≤ 1.34
phoenixcontactfl_switch_4008t-2sfp_firmware
1.0 ≤
𝑥
≤ 1.34
phoenixcontactfl_switch_4008t-2gt-4fx_sm_firmware
1.0 ≤
𝑥
≤ 1.34
phoenixcontactfl_switch_4008t-2gt-3fx_sm_firmware
1.0 ≤
𝑥
≤ 1.34
phoenixcontactfl_switch_4808e-16fx_lc-4gc_firmware
1.0 ≤
𝑥
≤ 1.34
phoenixcontactfl_switch_4808e-16fx_sm-4gc_firmware
1.0 ≤
𝑥
≤ 1.34
phoenixcontactfl_switch_4808e-16fx_sm_st-4gc_firmware
1.0 ≤
𝑥
≤ 1.34
phoenixcontactfl_switch_4808e-16fx_st-4gc_firmware
1.0 ≤
𝑥
≤ 1.34
phoenixcontactfl_switch_4808e-16fx-4gc_firmware
1.0 ≤
𝑥
≤ 1.34
phoenixcontactfl_switch_4808e-16fx_sm_lc-4gc_firmware
1.0 ≤
𝑥
≤ 1.34
phoenixcontactfl_switch_4012t_2gt_2fx_firmware
1.0 ≤
𝑥
≤ 1.34
phoenixcontactfl_switch_4012t-2gt-2fx_st_firmware
1.0 ≤
𝑥
≤ 1.34
phoenixcontactfl_switch_4824e-4gc_firmware
1.0 ≤
𝑥
≤ 1.34
phoenixcontactfl_switch_4800e-24fx-4gc_firmware
1.0 ≤
𝑥
≤ 1.34
phoenixcontactfl_switch_4800e-24fx_sm-4gc_firmware
1.0 ≤
𝑥
≤ 1.34
phoenixcontactfl_switch_3012e-2fx_sm_firmware
1.0 ≤
𝑥
≤ 1.34
phoenixcontactfl_switch_4000t-8poe-2sfp-r_firmware
1.0 ≤
𝑥
≤ 1.34
𝑥
= Vulnerable software versions