CVE-2022-22509

In Phoenix Contact FL SWITCH Series 2xxx in version 3.00 an incorrect privilege assignment allows an low privileged user to enable full access to the device configuration.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
8.8 HIGH
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CERTVDECNA
8.8 HIGH
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 50%
VendorProductVersion
phoenixcontactfl_switch_2005_firmware
3.00
phoenixcontactfl_switch_2008_firmware
3.00
phoenixcontactfl_switch_2008f_firmware
3.00
phoenixcontactfl_switch_2016_firmware
3.00
phoenixcontactfl_switch_2105_firmware
3.00
phoenixcontactfl_switch_2108_firmware
3.00
phoenixcontactfl_switch_2116_firmware
3.00
phoenixcontactfl_switch_2204-2tc-2sfx_firmware
3.00
phoenixcontactfl_switch_2206-2fx_firmware
3.00
phoenixcontactfl_switch_2206-2fx_sm_firmware
3.00
phoenixcontactfl_switch_2206-2fx_sm_st_firmware
3.00
phoenixcontactfl_switch_2206-2fx_st_firmware
3.00
phoenixcontactfl_switch_2206-2sfx_firmware
3.00
phoenixcontactfl_switch_2206-2sfx_pn_firmware
3.00
phoenixcontactfl_switch_2206c-2fx_firmware
3.00
phoenixcontactfl_switch_2207-fx_firmware
3.00
phoenixcontactfl_switch_2207-fx_sm_firmware
3.00
phoenixcontactfl_switch_2208_firmware
3.00
phoenixcontactfl_switch_2208c_firmware
3.00
phoenixcontactfl_switch_2208_pn_firmware
3.00
phoenixcontactfl_switch_2212-2tc-2sfx_firmware
3.00
phoenixcontactfl_switch_2214-2fx_firmware
3.00
phoenixcontactfl_switch_2214-2fx_sm_firmware
3.00
phoenixcontactfl_switch_2214-2sfx_firmware
3.00
phoenixcontactfl_switch_2214-2sfx_pn_firmware
3.00
phoenixcontactfl_switch_2216_firmware
3.00
phoenixcontactfl_switch_2216_pn_firmware
3.00
phoenixcontactfl_switch_2304-2gc-2sfp_firmware
3.00
phoenixcontactfl_switch_2306-2sfp_firmware
3.00
phoenixcontactfl_switch_2306-2sfp_pn_firmware
3.00
phoenixcontactfl_switch_2308_firmware
3.00
phoenixcontactfl_switch_2308_pn_firmware
3.00
phoenixcontactfl_switch_2312-2gc-2sfp_firmware
3.00
phoenixcontactfl_switch_2314-2sfp_firmware
3.00
phoenixcontactfl_switch_2314-2sfp_pn_firmware
3.00
phoenixcontactfl_switch_2316_firmware
3.00
phoenixcontactfl_switch_2316\/k1_firmware
3.00
phoenixcontactfl_switch_2316_pn_firmware
3.00
phoenixcontactfl_switch_2404-2tc-2sfx_firmware
3.00
phoenixcontactfl_switch_2406-2sfx_firmware
3.00
phoenixcontactfl_switch_2406-2sfx_pn_firmware
3.00
phoenixcontactfl_switch_2408_firmware
3.00
phoenixcontactfl_switch_2408_pn_firmware
3.00
phoenixcontactfl_switch_2412-2tc-2sfx_firmware
3.00
phoenixcontactfl_switch_2414-2sfx_firmware
3.00
phoenixcontactfl_switch_2414-2sfx_pn_firmware
3.00
phoenixcontactfl_switch_2416_firmware
3.00
phoenixcontactfl_switch_2416_pn_firmware
3.00
phoenixcontactfl_switch_2504-2gc-2sfp_firmware
3.00
phoenixcontactfl_switch_2506-2sfp_firmware
3.00
phoenixcontactfl_switch_2506-2sfp\/k1_firmware
3.00
phoenixcontactfl_switch_2506-2sfp_pn_firmware
3.00
phoenixcontactfl_switch_2508_firmware
3.00
phoenixcontactfl_switch_2508\/k1_firmware
3.00
phoenixcontactfl_switch_2508_pn_firmware
3.00
phoenixcontactfl_switch_2512-2gc-2sfp_firmware
3.00
phoenixcontactfl_switch_2514-2sfp_firmware
3.00
phoenixcontactfl_switch_2514-2sfp_pn_firmware
3.00
phoenixcontactfl_switch_2516_firmware
3.00
phoenixcontactfl_switch_2516_pn_firmware
3.00
phoenixcontactfl_switch_2608_firmware
3.00
phoenixcontactfl_switch_2608_pn_firmware
3.00
phoenixcontactfl_switch_2708_firmware
3.00
phoenixcontactfl_switch_2708_pn_firmware
3.00
phoenixcontactfl_switch_2205_firmware
3.00
𝑥
= Vulnerable software versions