An Information Exposure issue was discovered in PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, and 48xxx Series products running firmware Version 1.0 to 1.32. A remote unauthenticated attacker may be able to use Monitor Mode on the device to read diagnostic information.
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Link | Tags |
---|---|
https://cert.vde.com/en-us/advisories/vde-2017-006 | |
https://ics-cert.us-cert.gov/advisories/ICSA-18-011-03 | us government resource third party advisory patch |