Buffer overflow in Phoenixcontact Fl Switch 3004t-Fx
CVE-2018-10731
All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to buffer overflows when handling very large cookies (a different vulnerability than CVE-2018-10728).
Vulnerability class: Buffer Overflow
Published · last modified .
CVSS v3 metric
CVSS v3 base score 9.0 (Critical). Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.027 (85.3th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 85th percentile — 85.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.027 · newest: 0.027 · change: -0.000
Affected products
- Phoenixcontact Fl Switch 3004t-Fx
- Phoenixcontact Fl Switch 3004t-Fx Firmware
- Phoenixcontact Fl Switch 3004t-Fx St
- Phoenixcontact Fl Switch 3004t-Fx St Firmware
- Phoenixcontact Fl Switch 3005
- Phoenixcontact Fl Switch 3005 Firmware
- Phoenixcontact Fl Switch 3005t
- Phoenixcontact Fl Switch 3005t Firmware
- Phoenixcontact Fl Switch 3006t-2fx
- Phoenixcontact Fl Switch 3006t-2fx Firmware
Weakness classification (CWE)
References
- ics-cert.us-cert.gov/advisories/ICSA-18-137-02 (US Government Resource, Patch, Third Party Advisory)
- cert.vde.com/de-de/advisories/vde-2018-007 (Patch, Third Party Advisory)
- www.securityfocus.com/bid/104231 (VDB Entry, Third Party Advisory, vdb-entry)
Frequently asked questions
- What is CVE-2018-10731?
- CVE-2018-10731 is a critical-severity vulnerability in Phoenixcontact Fl Switch 3004t-Fx, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. CVSS score: 9.0/10. Published 2018-05-17.
- How severe is CVE-2018-10731?
- Critical severity. CVSS v3 base score is 9.0 out of 10.