CVE-2022-22509

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 02-02-2022 02:15

Last modified: - 05-02-2022 05:49

Total changes: - 3

Description

In Phoenix Contact FL SWITCH Series 2xxx in version 3.00 an incorrect privilege assignment allows an low privileged user to enable full access to the device configuration.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Low

Attack complexity

Network

Attack vector

High

Availability

High

Confidentiality

High

Integrity

Low

Privileges required

Unchanged

Scope

None

User interaction

8.8

Base score

2.8

5.9

Exploitability score

Impact score

Verification logic

AND

vendor=phoenixcontact AND product=fl_switch_2005_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2005 AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2008_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2008 AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2008f_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2008f AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2016_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2016 AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2105_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2105 AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2108_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2108 AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2116_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2116 AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2204-2tc-2sfx_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2204-2tc-2sfx AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2206-2fx_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2206-2fx AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2206-2fx_sm_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2206-2fx_sm AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2206-2fx_sm_st_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2206-2fx_sm_st AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2206-2fx_st_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2206-2fx_st AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2206-2sfx_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2206-2sfx AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2206-2sfx_pn_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2206-2sfx_pn AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2206c-2fx_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2206c-2fx AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2207-fx_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2207-fx AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2207-fx_sm_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2207-fx_sm AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2208_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2208 AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2208c_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2208c AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2208_pn_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2208_pn AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2212-2tc-2sfx_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2212-2tc-2sfx AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2214-2fx_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2214-2fx AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2214-2fx_sm_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2214-2fx_sm AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2214-2sfx_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2214-2sfx AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2214-2sfx_pn_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2214-2sfx_pn AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2216_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2216 AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2216_pn_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2216_pn AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2304-2gc-2sfp_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2304-2gc-2sfp AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2306-2sfp_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2306-2sfp AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2306-2sfp_pn_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2306-2sfp_pn AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2308_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2308 AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2308_pn_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2308_pn AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2312-2gc-2sfp_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2312-2gc-2sfp AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2314-2sfp_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2314-2sfp AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2314-2sfp_pn_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2314-2sfp_pn AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2316_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2316 AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2316\/k1_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2316\/k1 AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2316_pn_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2316_pn AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2404-2tc-2sfx_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2404-2tc-2sfx AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2406-2sfx_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2406-2sfx AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2406-2sfx_pn_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2406-2sfx_pn AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2408_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2408 AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2408_pn_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2408_pn AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2412-2tc-2sfx_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2412-2tc-2sfx AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2414-2sfx_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2414-2sfx AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2414-2sfx_pn_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2414-2sfx_pn AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2416_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2416 AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2416_pn_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2416_pn AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2504-2gc-2sfp_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2504-2gc-2sfp AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2506-2sfp_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2506-2sfp AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2506-2sfp\/k1_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2506-2sfp\/k1 AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2506-2sfp_pn_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2506-2sfp_pn AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2508_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2508 AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2508\/k1_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2508\/k1 AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2508_pn_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2508_pn AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2512-2gc-2sfp_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2512-2gc-2sfp AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2514-2sfp_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2514-2sfp AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2514-2sfp_pn_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2514-2sfp_pn AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2516_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2516 AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2516_pn_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2516_pn AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2608_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2608 AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2608_pn_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2608_pn AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2708_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2708 AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2708_pn_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2708_pn AND version=-

AND

vendor=phoenixcontact AND product=fl_switch_2205_firmware AND version=3.00

vendor=phoenixcontact AND product=fl_switch_2205 AND version=-

Reference

https://cert.vde.com/en/advisories/VDE-2022-001/

Keywords

CVE-2022-22509

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2022-22509

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures