CVE-2022-22509

EUVD-2022-27655
In Phoenix Contact FL SWITCH Series 2xxx in version 3.00 an incorrect privilege assignment allows an low privileged user to enable full access to the device configuration.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.8 HIGH
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CERTVDECNA
8.8 HIGH
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 51%
Affected Products (NVD)
VendorProductVersion
phoenixcontactfl_switch_2005_firmware
3.00
phoenixcontactfl_switch_2008_firmware
3.00
phoenixcontactfl_switch_2008f_firmware
3.00
phoenixcontactfl_switch_2016_firmware
3.00
phoenixcontactfl_switch_2105_firmware
3.00
phoenixcontactfl_switch_2108_firmware
3.00
phoenixcontactfl_switch_2116_firmware
3.00
phoenixcontactfl_switch_2204-2tc-2sfx_firmware
3.00
phoenixcontactfl_switch_2206-2fx_firmware
3.00
phoenixcontactfl_switch_2206-2fx_sm_firmware
3.00
phoenixcontactfl_switch_2206-2fx_sm_st_firmware
3.00
phoenixcontactfl_switch_2206-2fx_st_firmware
3.00
phoenixcontactfl_switch_2206-2sfx_firmware
3.00
phoenixcontactfl_switch_2206-2sfx_pn_firmware
3.00
phoenixcontactfl_switch_2206c-2fx_firmware
3.00
phoenixcontactfl_switch_2207-fx_firmware
3.00
phoenixcontactfl_switch_2207-fx_sm_firmware
3.00
phoenixcontactfl_switch_2208_firmware
3.00
phoenixcontactfl_switch_2208c_firmware
3.00
phoenixcontactfl_switch_2208_pn_firmware
3.00
phoenixcontactfl_switch_2212-2tc-2sfx_firmware
3.00
phoenixcontactfl_switch_2214-2fx_firmware
3.00
phoenixcontactfl_switch_2214-2fx_sm_firmware
3.00
phoenixcontactfl_switch_2214-2sfx_firmware
3.00
phoenixcontactfl_switch_2214-2sfx_pn_firmware
3.00
phoenixcontactfl_switch_2216_firmware
3.00
phoenixcontactfl_switch_2216_pn_firmware
3.00
phoenixcontactfl_switch_2304-2gc-2sfp_firmware
3.00
phoenixcontactfl_switch_2306-2sfp_firmware
3.00
phoenixcontactfl_switch_2306-2sfp_pn_firmware
3.00
phoenixcontactfl_switch_2308_firmware
3.00
phoenixcontactfl_switch_2308_pn_firmware
3.00
phoenixcontactfl_switch_2312-2gc-2sfp_firmware
3.00
phoenixcontactfl_switch_2314-2sfp_firmware
3.00
phoenixcontactfl_switch_2314-2sfp_pn_firmware
3.00
phoenixcontactfl_switch_2316_firmware
3.00
phoenixcontactfl_switch_2316\/k1_firmware
3.00
phoenixcontactfl_switch_2316_pn_firmware
3.00
phoenixcontactfl_switch_2404-2tc-2sfx_firmware
3.00
phoenixcontactfl_switch_2406-2sfx_firmware
3.00
phoenixcontactfl_switch_2406-2sfx_pn_firmware
3.00
phoenixcontactfl_switch_2408_firmware
3.00
phoenixcontactfl_switch_2408_pn_firmware
3.00
phoenixcontactfl_switch_2412-2tc-2sfx_firmware
3.00
phoenixcontactfl_switch_2414-2sfx_firmware
3.00
phoenixcontactfl_switch_2414-2sfx_pn_firmware
3.00
phoenixcontactfl_switch_2416_firmware
3.00
phoenixcontactfl_switch_2416_pn_firmware
3.00
phoenixcontactfl_switch_2504-2gc-2sfp_firmware
3.00
phoenixcontactfl_switch_2506-2sfp_firmware
3.00
phoenixcontactfl_switch_2506-2sfp\/k1_firmware
3.00
phoenixcontactfl_switch_2506-2sfp_pn_firmware
3.00
phoenixcontactfl_switch_2508_firmware
3.00
phoenixcontactfl_switch_2508\/k1_firmware
3.00
phoenixcontactfl_switch_2508_pn_firmware
3.00
phoenixcontactfl_switch_2512-2gc-2sfp_firmware
3.00
phoenixcontactfl_switch_2514-2sfp_firmware
3.00
phoenixcontactfl_switch_2514-2sfp_pn_firmware
3.00
phoenixcontactfl_switch_2516_firmware
3.00
phoenixcontactfl_switch_2516_pn_firmware
3.00
phoenixcontactfl_switch_2608_firmware
3.00
phoenixcontactfl_switch_2608_pn_firmware
3.00
phoenixcontactfl_switch_2708_firmware
3.00
phoenixcontactfl_switch_2708_pn_firmware
3.00
phoenixcontactfl_switch_2205_firmware
3.00
𝑥
= Vulnerable software versions