Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2017-16743 Details
Description
An Improper Authorization issue was discovered in PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, and 48xxx Series products running firmware Version 1.0 to 1.32. A remote unauthenticated attacker may be able to craft special HTTP requests allowing an attacker to bypass web-service authentication allowing the attacker to obtain administrative privileges on the device.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://cert.vde.com/en-us/advisories/vde-2017-006 | CVE | |
| https://ics-cert.us-cert.gov/advisories/ICSA-18-011-03 | CVE | PatchThird Party AdvisoryUS Government Resource |
| https://cert.vde.com/en-us/advisories/vde-2017-006 | [email protected] | |
| https://ics-cert.us-cert.gov/advisories/ICSA-18-011-03 | [email protected] | PatchThird Party AdvisoryUS Government Resource |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-863 | Incorrect Authorization | [email protected] |
| CWE-285 | Improper Authorization | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| phoenixcontact fl switch 3005 firmware | >= 1.0, <= 1.32 |
CPE
Remediation
| |
| phoenixcontact fl switch 3005 | All versions |
CPE
Remediation
| |
| phoenixcontact fl switch 3005t firmware | >= 1.0, <= 1.32 |
CPE
Remediation
| |
| phoenixcontact fl switch 3005t | All versions |
CPE
Remediation
| |
| phoenixcontact fl switch 3004t-fx firmware | >= 1.0, <= 1.32 |
CPE
Remediation
| |
| phoenixcontact fl switch 3004t-fx | All versions |
CPE
Remediation
| |
| phoenixcontact fl switch 3004t-fx st firmware | >= 1.0, <= 1.32 |
CPE
Remediation
| |
| phoenixcontact fl switch 3004t-fx st | All versions |
CPE
Remediation
| |
| phoenixcontact fl switch 3008 firmware | >= 1.0, <= 1.32 |
CPE
Remediation
| |
| phoenixcontact fl switch 3008 | All versions |
CPE
Remediation
| |
| phoenixcontact fl switch 3008t firmware | >= 1.0, <= 1.32 |
CPE
Remediation
| |
| phoenixcontact fl switch 3008t | All versions |
CPE
Remediation
| |
| phoenixcontact fl switch 3006t-2fx firmware | >= 1.0, <= 1.32 |
CPE
Remediation
| |
| phoenixcontact fl switch 3006t-2fx | All versions |
CPE
Remediation
| |
| phoenixcontact fl switch 3006t-2fx st firmware | >= 1.0, <= 1.32 |
CPE
Remediation
| |
| phoenixcontact fl switch 3006t-2fx st | All versions |
CPE
Remediation
| |
| phoenixcontact fl switch 3012e-2sfx firmware | >= 1.0, <= 1.32 |
CPE
Remediation
| |
| phoenixcontact fl switch 3012e-2sfx | All versions |
CPE
Remediation
| |
| phoenixcontact fl switch 3016e firmware | >= 1.0, <= 1.32 |
CPE
Remediation
| |
| phoenixcontact fl switch 3016e | All versions |
CPE
Remediation
| |
| phoenixcontact fl switch 3016 firmware | >= 1.0, <= 1.32 |
CPE
Remediation
| |
| phoenixcontact fl switch 3016 | All versions |
CPE
Remediation
| |
| phoenixcontact fl switch 3016t firmware | >= 1.0, <= 1.32 |
CPE
Remediation
| |
| phoenixcontact fl switch 3016t | All versions |
CPE
Remediation
| |
| phoenixcontact fl switch 3006t-2fx sm firmware | >= 1.0, <= 1.32 |
CPE
Remediation
| |
| phoenixcontact fl switch 3006t-2fx sm | All versions |
CPE
Remediation
| |
| phoenixcontact fl switch 4008t-2sfp firmware | >= 1.0, <= 1.32 |
CPE
Remediation
| |
| phoenixcontact fl switch 4008t-2sfp | All versions |
CPE
Remediation
| |
| phoenixcontact fl switch 4008t-2gt-4fx sm firmware | >= 1.0, <= 1.32 |
CPE
Remediation
| |
| phoenixcontact fl switch 4008t-2gt-4fx sm | All versions |
CPE
Remediation
| |
| phoenixcontact fl switch 4008t-2gt-3fx sm firmware | >= 1.0, <= 1.32 |
CPE
Remediation
| |
| phoenixcontact fl switch 4008t-2gt-3fx sm | All versions |
CPE
Remediation
| |
| phoenixcontact fl switch 4808e-16fx lc-4gc firmware | >= 1.0, <= 1.32 |
CPE
Remediation
| |
| phoenixcontact fl switch 4808e-16fx lc-4gc | All versions |
CPE
Remediation
| |
| phoenixcontact fl switch 4808e-16fx sm-4gc firmware | >= 1.0, <= 1.32 |
CPE
Remediation
| |
| phoenixcontact fl switch 4808e-16fx sm-4gc | All versions |
CPE
Remediation
| |
| phoenixcontact fl switch 4808e-16fx sm st-4gc firmware | >= 1.0, <= 1.32 |
CPE
Remediation
| |
| phoenixcontact fl switch 4808e-16fx sm st-4gc | All versions |
CPE
Remediation
| |
| phoenixcontact fl switch 4808e-16fx st-4gc firmware | >= 1.0, <= 1.32 |
CPE
Remediation
| |
| phoenixcontact fl switch 4808e-16fx st-4gc | All versions |
CPE
Remediation
| |
| phoenixcontact fl switch 4808e-16fx-4gc firmware | >= 1.0, <= 1.32 |
CPE
Remediation
| |
| phoenixcontact fl switch 4808e-16fx-4gc | All versions |
CPE
Remediation
| |
| phoenixcontact fl switch 4808e-16fx sm lc-4gc firmware | >= 1.0, <= 1.32 |
CPE
Remediation
| |
| phoenixcontact fl switch 4808e-16fx sm lc-4gc | All versions |
CPE
Remediation
| |
| phoenixcontact fl switch 4012t 2gt 2fx firmware | >= 1.0, <= 1.32 |
CPE
Remediation
| |
| phoenixcontact fl switch 4012t 2gt 2fx | All versions |
CPE
Remediation
| |
| phoenixcontact fl switch 4012t-2gt-2fx st firmware | >= 1.0, <= 1.32 |
CPE
Remediation
| |
| phoenixcontact fl switch 4012t-2gt-2fx st | All versions |
CPE
Remediation
| |
| phoenixcontact fl switch 4824e-4gc firmware | >= 1.0, <= 1.32 |
CPE
Remediation
| |
| phoenixcontact fl switch 4824e-4gc | All versions |
CPE
Remediation
| |
| phoenixcontact fl switch 4800e-24fx-4gc firmware | >= 1.0, <= 1.32 |
CPE
Remediation
| |
| phoenixcontact fl switch 4800e-24fx-4gc | All versions |
CPE
Remediation
| |
| phoenixcontact fl switch 4800e-24fx sm-4gc firmware | >= 1.0, <= 1.32 |
CPE
Remediation
| |
| phoenixcontact fl switch 4800e-24fx sm-4gc | All versions |
CPE
Remediation
| |
| phoenixcontact fl switch 3012e-2fx sm firmware | >= 1.0, <= 1.32 |
CPE
Remediation
| |
| phoenixcontact fl switch 3012e-2fx sm | All versions |
CPE
Remediation
| |
| phoenixcontact fl switch 4000t-8poe-2sfp-r firmware | >= 1.0, <= 1.32 |
CPE
Remediation
| |
| phoenixcontact fl switch 4000t-8poe-2sfp-r | All versions |
CPE
Remediation
| |
Change History
7 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| Oct 9, 2019 | CVE Modified | [email protected] |
| Oct 3, 2019 | CWE Remap | [email protected] |
| May 17, 2018 | CVE Modified | [email protected] |
| Jan 31, 2018 | Initial Analysis | [email protected] |