Improper Authorization Vulnerability in PHOENIX CONTACT FL SWITCH Series

CVE-2017-16743 · HIGH Severity

AV:N/AC:L/AU:N/C:C/I:C/A:C

An Improper Authorization issue was discovered in PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, and 48xxx Series products running firmware Version 1.0 to 1.32. A remote unauthenticated attacker may be able to craft special HTTP requests allowing an attacker to bypass web-service authentication allowing the attacker to obtain administrative privileges on the device.

Learn more about our Web App Pen Testing.