CVE-2018-10730

All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to OS command injection.
References
Link Resource
http://www.securityfocus.com/bid/104231 Third Party Advisory VDB Entry
https://cert.vde.com/de-de/advisories/vde-2018-004 Patch Third Party Advisory
https://ics-cert.us-cert.gov/advisories/ICSA-18-137-02 Patch Third Party Advisory US Government Resource
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_3005_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_3005:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_3005t_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_3005t:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_3004t-fx_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_3004t-fx:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_3004t-fx_st_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_3004t-fx_st:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_3008_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_3008:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_3008t_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_3008t:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_3006t-2fx_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_3006t-2fx:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_3006t-2fx_st_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_3006t-2fx_st:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_3012e-2sfx_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_3012e-2sfx:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_3016e_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_3016e:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_3016_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_3016:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_3016t_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_3016t:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_3006t-2fx_sm_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_3006t-2fx_sm:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_4008t-2sfp_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_4008t-2sfp:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_4008t-2gt-4fx_sm_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_4008t-2gt-4fx_sm:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_4008t-2gt-3fx_sm_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_4008t-2gt-3fx_sm:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_4808e-16fx_lc-4gc_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_4808e-16fx_lc-4gc:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_4808e-16fx_sm-4gc_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_4808e-16fx_sm-4gc:-:*:*:*:*:*:*:*

Configuration 19 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_4808e-16fx_sm_st-4gc_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_4808e-16fx_sm_st-4gc:-:*:*:*:*:*:*:*

Configuration 20 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_4808e-16fx_st-4gc_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_4808e-16fx_st-4gc:-:*:*:*:*:*:*:*

Configuration 21 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_4808e-16fx-4gc_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_4808e-16fx-4gc:-:*:*:*:*:*:*:*

Configuration 22 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_4808e-16fx_sm_lc-4gc_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_4808e-16fx_sm_lc-4gc:-:*:*:*:*:*:*:*

Configuration 23 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_4012t_2gt_2fx_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_4012t_2gt_2fx:-:*:*:*:*:*:*:*

Configuration 24 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_4012t-2gt-2fx_st_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_4012t-2gt-2fx_st:-:*:*:*:*:*:*:*

Configuration 25 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_4824e-4gc_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_4824e-4gc:-:*:*:*:*:*:*:*

Configuration 26 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_4800e-24fx-4gc_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_4800e-24fx-4gc:-:*:*:*:*:*:*:*

Configuration 27 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_4800e-24fx_sm-4gc_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_4800e-24fx_sm-4gc:-:*:*:*:*:*:*:*

Configuration 28 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_3012e-2fx_sm_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_3012e-2fx_sm:-:*:*:*:*:*:*:*

Configuration 29 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_4000t-8poe-2sfp-r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_4000t-8poe-2sfp-r:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2018-05-17 19:29

Updated : 2023-12-10 12:30


NVD link : CVE-2018-10730

Mitre link : CVE-2018-10730

CVE.ORG link : CVE-2018-10730


JSON object : View

Products Affected

phoenixcontact

  • fl_switch_3016
  • fl_switch_4008t-2sfp_firmware
  • fl_switch_4800e-24fx_sm-4gc
  • fl_switch_3016t
  • fl_switch_4008t-2gt-4fx_sm_firmware
  • fl_switch_4012t_2gt_2fx
  • fl_switch_4808e-16fx_st-4gc_firmware
  • fl_switch_3016e
  • fl_switch_3004t-fx_firmware
  • fl_switch_4808e-16fx-4gc
  • fl_switch_3005t
  • fl_switch_3016_firmware
  • fl_switch_3004t-fx_st_firmware
  • fl_switch_4808e-16fx_lc-4gc
  • fl_switch_3016e_firmware
  • fl_switch_4808e-16fx_st-4gc
  • fl_switch_3008
  • fl_switch_4808e-16fx_sm_lc-4gc
  • fl_switch_4808e-16fx_sm_st-4gc
  • fl_switch_4808e-16fx-4gc_firmware
  • fl_switch_4808e-16fx_sm_st-4gc_firmware
  • fl_switch_3012e-2fx_sm_firmware
  • fl_switch_3006t-2fx_sm_firmware
  • fl_switch_3006t-2fx_st_firmware
  • fl_switch_3008t
  • fl_switch_3016t_firmware
  • fl_switch_3004t-fx
  • fl_switch_4012t_2gt_2fx_firmware
  • fl_switch_4808e-16fx_lc-4gc_firmware
  • fl_switch_4000t-8poe-2sfp-r_firmware
  • fl_switch_3012e-2sfx
  • fl_switch_3005
  • fl_switch_3004t-fx_st
  • fl_switch_4008t-2gt-3fx_sm_firmware
  • fl_switch_4808e-16fx_sm-4gc
  • fl_switch_4824e-4gc
  • fl_switch_3012e-2fx_sm
  • fl_switch_3008_firmware
  • fl_switch_3012e-2sfx_firmware
  • fl_switch_4800e-24fx-4gc_firmware
  • fl_switch_4808e-16fx_sm-4gc_firmware
  • fl_switch_4008t-2gt-4fx_sm
  • fl_switch_4012t-2gt-2fx_st_firmware
  • fl_switch_3006t-2fx_sm
  • fl_switch_4824e-4gc_firmware
  • fl_switch_4800e-24fx_sm-4gc_firmware
  • fl_switch_4008t-2gt-3fx_sm
  • fl_switch_3005t_firmware
  • fl_switch_3006t-2fx
  • fl_switch_4008t-2sfp
  • fl_switch_3005_firmware
  • fl_switch_3006t-2fx_firmware
  • fl_switch_4808e-16fx_sm_lc-4gc_firmware
  • fl_switch_4012t-2gt-2fx_st
  • fl_switch_4800e-24fx-4gc
  • fl_switch_3006t-2fx_st
  • fl_switch_3008t_firmware
  • fl_switch_4000t-8poe-2sfp-r
CWE
CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')