CVE-2022-22509

In Phoenix Contact FL SWITCH Series 2xxx in version 3.00 an incorrect privilege assignment allows an low privileged user to enable full access to the device configuration.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.8 HIGH
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Affected Products (NVD)
VendorProductVersion
phoenixcontactfl_switch_2005_firmware
3.00
phoenixcontactfl_switch_2008_firmware
3.00
phoenixcontactfl_switch_2008f_firmware
3.00
phoenixcontactfl_switch_2016_firmware
3.00
phoenixcontactfl_switch_2105_firmware
3.00
phoenixcontactfl_switch_2108_firmware
3.00
phoenixcontactfl_switch_2116_firmware
3.00
phoenixcontactfl_switch_2204-2tc-2sfx_firmware
3.00
phoenixcontactfl_switch_2206-2fx_firmware
3.00
phoenixcontactfl_switch_2206-2fx_sm_firmware
3.00
phoenixcontactfl_switch_2206-2fx_sm_st_firmware
3.00
phoenixcontactfl_switch_2206-2fx_st_firmware
3.00
phoenixcontactfl_switch_2206-2sfx_firmware
3.00
phoenixcontactfl_switch_2206-2sfx_pn_firmware
3.00
phoenixcontactfl_switch_2206c-2fx_firmware
3.00
phoenixcontactfl_switch_2207-fx_firmware
3.00
phoenixcontactfl_switch_2207-fx_sm_firmware
3.00
phoenixcontactfl_switch_2208_firmware
3.00
phoenixcontactfl_switch_2208c_firmware
3.00
phoenixcontactfl_switch_2208_pn_firmware
3.00
phoenixcontactfl_switch_2212-2tc-2sfx_firmware
3.00
phoenixcontactfl_switch_2214-2fx_firmware
3.00
phoenixcontactfl_switch_2214-2fx_sm_firmware
3.00
phoenixcontactfl_switch_2214-2sfx_firmware
3.00
phoenixcontactfl_switch_2214-2sfx_pn_firmware
3.00
phoenixcontactfl_switch_2216_firmware
3.00
phoenixcontactfl_switch_2216_pn_firmware
3.00
phoenixcontactfl_switch_2304-2gc-2sfp_firmware
3.00
phoenixcontactfl_switch_2306-2sfp_firmware
3.00
phoenixcontactfl_switch_2306-2sfp_pn_firmware
3.00
phoenixcontactfl_switch_2308_firmware
3.00
phoenixcontactfl_switch_2308_pn_firmware
3.00
phoenixcontactfl_switch_2312-2gc-2sfp_firmware
3.00
phoenixcontactfl_switch_2314-2sfp_firmware
3.00
phoenixcontactfl_switch_2314-2sfp_pn_firmware
3.00
phoenixcontactfl_switch_2316_firmware
3.00
phoenixcontactfl_switch_2316\/k1_firmware
3.00
phoenixcontactfl_switch_2316_pn_firmware
3.00
phoenixcontactfl_switch_2404-2tc-2sfx_firmware
3.00
phoenixcontactfl_switch_2406-2sfx_firmware
3.00
phoenixcontactfl_switch_2406-2sfx_pn_firmware
3.00
phoenixcontactfl_switch_2408_firmware
3.00
phoenixcontactfl_switch_2408_pn_firmware
3.00
phoenixcontactfl_switch_2412-2tc-2sfx_firmware
3.00
phoenixcontactfl_switch_2414-2sfx_firmware
3.00
phoenixcontactfl_switch_2414-2sfx_pn_firmware
3.00
phoenixcontactfl_switch_2416_firmware
3.00
phoenixcontactfl_switch_2416_pn_firmware
3.00
phoenixcontactfl_switch_2504-2gc-2sfp_firmware
3.00
phoenixcontactfl_switch_2506-2sfp_firmware
3.00
phoenixcontactfl_switch_2506-2sfp\/k1_firmware
3.00
phoenixcontactfl_switch_2506-2sfp_pn_firmware
3.00
phoenixcontactfl_switch_2508_firmware
3.00
phoenixcontactfl_switch_2508\/k1_firmware
3.00
phoenixcontactfl_switch_2508_pn_firmware
3.00
phoenixcontactfl_switch_2512-2gc-2sfp_firmware
3.00
phoenixcontactfl_switch_2514-2sfp_firmware
3.00
phoenixcontactfl_switch_2514-2sfp_pn_firmware
3.00
phoenixcontactfl_switch_2516_firmware
3.00
phoenixcontactfl_switch_2516_pn_firmware
3.00
phoenixcontactfl_switch_2608_firmware
3.00
phoenixcontactfl_switch_2608_pn_firmware
3.00
phoenixcontactfl_switch_2708_firmware
3.00
phoenixcontactfl_switch_2708_pn_firmware
3.00
phoenixcontactfl_switch_2205_firmware
3.00
𝑥
= Vulnerable software versions