Description (CNA)
In Phoenix Contact FL SWITCH SMCS series products in multiple versions an attacker may insert malicious code via LLDP frames into the web-based management which could then be executed by the client.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Phoenix Contact / FL SWITCH | affected SMCS 16TX (2700996) through 4.70; affected SMCS 14TX/2FX (2700997) through 4.70; affected SMCS 14TX/2FX-SM (2701466) through 4.70; affected SMCS 8GT (2891123) through 4.70; affected SMCS 6GT/2SFP (2891479) through 4.70; affected SMCS 8TX-PN (2989103) through 4.70; affected SMCS 4TX-PN (2989093) through 4.70; affected SMCS 8TX (2989226) through 4.70; affected SMCS 6TX/2SFP (2989323) through 4.70; affected SMN 6TX/2POF-PN (2700290) through 4.70; affected SMN 8TX-PN (2989501) through 4.70; affected SMN 6TX/2FX (2989543) through 4.70; affected SMN 6TX/2FX SM (2989556) through 4.70 |
| Phoenix Contact / FL NAT | affected SMN 8TX (2989365) through 4.63; affected SMN 8TX-M (2702443) through 4.63 |
CWE
CWE-79
References
ADP enrichment
No English description supplied.