CVE-2018-10731 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2018-10731

Analyzed

More Info Official Page

Source-cve@mitre.org

Published At-17 May, 2018 | 19:29

Updated At-20 Jun, 2018 | 17:38

All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to buffer overflows when handling very large cookies (a different vulnerability than CVE-2018-10728).

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	9.0	CRITICAL	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Primary	2.0	9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C

Type: Primary

Version: 3.0

Base score: 9.0

Base severity: CRITICAL

Vector:

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 9.3

Base severity: HIGH

Vector:

AV:N/AC:M/Au:N/C:C/I:C/A:C

CPE Matches

Phoenix Contact GmbH & Co. KG

>>fl_switch_3005_firmware>>Versions between 1.0(exclusive) and 1.33(inclusive)

cpe:2.3:o:phoenixcontact:fl_switch_3005_firmware:*:*:*:*:*:*:*:*

Phoenix Contact GmbH & Co. KG

>>fl_switch_3005>>-

cpe:2.3:h:phoenixcontact:fl_switch_3005:-:*:*:*:*:*:*:*

Phoenix Contact GmbH & Co. KG

>>fl_switch_3005t_firmware>>Versions from 1.0(inclusive) to 1.33(inclusive)

cpe:2.3:o:phoenixcontact:fl_switch_3005t_firmware:*:*:*:*:*:*:*:*

Phoenix Contact GmbH & Co. KG

>>fl_switch_3005t>>-

cpe:2.3:h:phoenixcontact:fl_switch_3005t:-:*:*:*:*:*:*:*

Phoenix Contact GmbH & Co. KG

>>fl_switch_3004t-fx_firmware>>Versions from 1.0(inclusive) to 1.33(inclusive)

cpe:2.3:o:phoenixcontact:fl_switch_3004t-fx_firmware:*:*:*:*:*:*:*:*

Phoenix Contact GmbH & Co. KG

>>fl_switch_3004t-fx>>-

cpe:2.3:h:phoenixcontact:fl_switch_3004t-fx:-:*:*:*:*:*:*:*

Phoenix Contact GmbH & Co. KG

>>fl_switch_3004t-fx_st_firmware>>Versions from 1.0(inclusive) to 1.33(inclusive)

cpe:2.3:o:phoenixcontact:fl_switch_3004t-fx_st_firmware:*:*:*:*:*:*:*:*

Phoenix Contact GmbH & Co. KG

>>fl_switch_3004t-fx_st>>-

cpe:2.3:h:phoenixcontact:fl_switch_3004t-fx_st:-:*:*:*:*:*:*:*

Phoenix Contact GmbH & Co. KG

>>fl_switch_3008_firmware>>Versions from 1.0(inclusive) to 1.33(inclusive)

cpe:2.3:o:phoenixcontact:fl_switch_3008_firmware:*:*:*:*:*:*:*:*

Phoenix Contact GmbH & Co. KG

>>fl_switch_3008>>-

cpe:2.3:h:phoenixcontact:fl_switch_3008:-:*:*:*:*:*:*:*

Phoenix Contact GmbH & Co. KG

>>fl_switch_3008t_firmware>>Versions from 1.0(inclusive) to 1.33(inclusive)

cpe:2.3:o:phoenixcontact:fl_switch_3008t_firmware:*:*:*:*:*:*:*:*

Phoenix Contact GmbH & Co. KG

>>fl_switch_3008t>>-

cpe:2.3:h:phoenixcontact:fl_switch_3008t:-:*:*:*:*:*:*:*

Phoenix Contact GmbH & Co. KG

>>fl_switch_3006t-2fx_firmware>>Versions from 1.0(inclusive) to 1.33(inclusive)

cpe:2.3:o:phoenixcontact:fl_switch_3006t-2fx_firmware:*:*:*:*:*:*:*:*

Phoenix Contact GmbH & Co. KG

>>fl_switch_3006t-2fx>>-

cpe:2.3:h:phoenixcontact:fl_switch_3006t-2fx:-:*:*:*:*:*:*:*

Phoenix Contact GmbH & Co. KG

>>fl_switch_3006t-2fx_st_firmware>>Versions from 1.0(inclusive) to 1.33(inclusive)

cpe:2.3:o:phoenixcontact:fl_switch_3006t-2fx_st_firmware:*:*:*:*:*:*:*:*

Phoenix Contact GmbH & Co. KG

>>fl_switch_3006t-2fx_st>>-

cpe:2.3:h:phoenixcontact:fl_switch_3006t-2fx_st:-:*:*:*:*:*:*:*

Phoenix Contact GmbH & Co. KG

>>fl_switch_3012e-2sfx_firmware>>Versions from 1.0(inclusive) to 1.33(inclusive)

cpe:2.3:o:phoenixcontact:fl_switch_3012e-2sfx_firmware:*:*:*:*:*:*:*:*

Phoenix Contact GmbH & Co. KG

>>fl_switch_3012e-2sfx>>-

cpe:2.3:h:phoenixcontact:fl_switch_3012e-2sfx:-:*:*:*:*:*:*:*

Phoenix Contact GmbH & Co. KG

>>fl_switch_3016e_firmware>>Versions from 1.0(inclusive) to 1.33(inclusive)

cpe:2.3:o:phoenixcontact:fl_switch_3016e_firmware:*:*:*:*:*:*:*:*

Phoenix Contact GmbH & Co. KG

>>fl_switch_3016e>>-

cpe:2.3:h:phoenixcontact:fl_switch_3016e:-:*:*:*:*:*:*:*

Phoenix Contact GmbH & Co. KG

>>fl_switch_3016_firmware>>Versions from 1.0(inclusive) to 1.33(inclusive)

cpe:2.3:o:phoenixcontact:fl_switch_3016_firmware:*:*:*:*:*:*:*:*

Phoenix Contact GmbH & Co. KG

>>fl_switch_3016>>-

cpe:2.3:h:phoenixcontact:fl_switch_3016:-:*:*:*:*:*:*:*

Phoenix Contact GmbH & Co. KG

>>fl_switch_3016t_firmware>>Versions from 1.0(inclusive) to 1.33(inclusive)

cpe:2.3:o:phoenixcontact:fl_switch_3016t_firmware:*:*:*:*:*:*:*:*

Phoenix Contact GmbH & Co. KG

>>fl_switch_3016t>>-

cpe:2.3:h:phoenixcontact:fl_switch_3016t:-:*:*:*:*:*:*:*

Phoenix Contact GmbH & Co. KG

>>fl_switch_3006t-2fx_sm_firmware>>Versions from 1.0(inclusive) to 1.33(inclusive)

cpe:2.3:o:phoenixcontact:fl_switch_3006t-2fx_sm_firmware:*:*:*:*:*:*:*:*

Phoenix Contact GmbH & Co. KG

>>fl_switch_3006t-2fx_sm>>-

cpe:2.3:h:phoenixcontact:fl_switch_3006t-2fx_sm:-:*:*:*:*:*:*:*

Phoenix Contact GmbH & Co. KG

>>fl_switch_4008t-2sfp_firmware>>Versions from 1.0(inclusive) to 1.33(inclusive)

cpe:2.3:o:phoenixcontact:fl_switch_4008t-2sfp_firmware:*:*:*:*:*:*:*:*

Phoenix Contact GmbH & Co. KG

>>fl_switch_4008t-2sfp>>-

cpe:2.3:h:phoenixcontact:fl_switch_4008t-2sfp:-:*:*:*:*:*:*:*

Phoenix Contact GmbH & Co. KG

>>fl_switch_4008t-2gt-4fx_sm_firmware>>Versions from 1.0(inclusive) to 1.33(inclusive)

cpe:2.3:o:phoenixcontact:fl_switch_4008t-2gt-4fx_sm_firmware:*:*:*:*:*:*:*:*

Phoenix Contact GmbH & Co. KG

>>fl_switch_4008t-2gt-4fx_sm>>-

cpe:2.3:h:phoenixcontact:fl_switch_4008t-2gt-4fx_sm:-:*:*:*:*:*:*:*

Phoenix Contact GmbH & Co. KG

>>fl_switch_4008t-2gt-3fx_sm_firmware>>Versions from 1.0(inclusive) to 1.33(inclusive)

cpe:2.3:o:phoenixcontact:fl_switch_4008t-2gt-3fx_sm_firmware:*:*:*:*:*:*:*:*

Phoenix Contact GmbH & Co. KG

>>fl_switch_4008t-2gt-3fx_sm>>-

cpe:2.3:h:phoenixcontact:fl_switch_4008t-2gt-3fx_sm:-:*:*:*:*:*:*:*

Phoenix Contact GmbH & Co. KG

>>fl_switch_4808e-16fx_lc-4gc_firmware>>Versions from 1.0(inclusive) to 1.33(inclusive)

cpe:2.3:o:phoenixcontact:fl_switch_4808e-16fx_lc-4gc_firmware:*:*:*:*:*:*:*:*

Phoenix Contact GmbH & Co. KG

>>fl_switch_4808e-16fx_lc-4gc>>-

cpe:2.3:h:phoenixcontact:fl_switch_4808e-16fx_lc-4gc:-:*:*:*:*:*:*:*

Phoenix Contact GmbH & Co. KG

>>fl_switch_4808e-16fx_sm-4gc_firmware>>Versions from 1.0(inclusive) to 1.33(inclusive)

cpe:2.3:o:phoenixcontact:fl_switch_4808e-16fx_sm-4gc_firmware:*:*:*:*:*:*:*:*

Phoenix Contact GmbH & Co. KG

>>fl_switch_4808e-16fx_sm-4gc>>-

cpe:2.3:h:phoenixcontact:fl_switch_4808e-16fx_sm-4gc:-:*:*:*:*:*:*:*

Phoenix Contact GmbH & Co. KG

>>fl_switch_4808e-16fx_sm_st-4gc_firmware>>Versions from 1.0(inclusive) to 1.33(inclusive)

cpe:2.3:o:phoenixcontact:fl_switch_4808e-16fx_sm_st-4gc_firmware:*:*:*:*:*:*:*:*

Phoenix Contact GmbH & Co. KG

>>fl_switch_4808e-16fx_sm_st-4gc>>-

cpe:2.3:h:phoenixcontact:fl_switch_4808e-16fx_sm_st-4gc:-:*:*:*:*:*:*:*

Phoenix Contact GmbH & Co. KG

>>fl_switch_4808e-16fx_st-4gc_firmware>>Versions from 1.0(inclusive) to 1.33(inclusive)

cpe:2.3:o:phoenixcontact:fl_switch_4808e-16fx_st-4gc_firmware:*:*:*:*:*:*:*:*

Phoenix Contact GmbH & Co. KG

>>fl_switch_4808e-16fx_st-4gc>>-

cpe:2.3:h:phoenixcontact:fl_switch_4808e-16fx_st-4gc:-:*:*:*:*:*:*:*

Phoenix Contact GmbH & Co. KG

>>fl_switch_4808e-16fx-4gc_firmware>>Versions from 1.0(inclusive) to 1.33(inclusive)

cpe:2.3:o:phoenixcontact:fl_switch_4808e-16fx-4gc_firmware:*:*:*:*:*:*:*:*

Phoenix Contact GmbH & Co. KG

>>fl_switch_4808e-16fx-4gc>>-

cpe:2.3:h:phoenixcontact:fl_switch_4808e-16fx-4gc:-:*:*:*:*:*:*:*

Phoenix Contact GmbH & Co. KG

>>fl_switch_4808e-16fx_sm_lc-4gc_firmware>>Versions from 1.0(inclusive) to 1.33(inclusive)

cpe:2.3:o:phoenixcontact:fl_switch_4808e-16fx_sm_lc-4gc_firmware:*:*:*:*:*:*:*:*

Phoenix Contact GmbH & Co. KG

>>fl_switch_4808e-16fx_sm_lc-4gc>>-

cpe:2.3:h:phoenixcontact:fl_switch_4808e-16fx_sm_lc-4gc:-:*:*:*:*:*:*:*

Phoenix Contact GmbH & Co. KG

>>fl_switch_4012t_2gt_2fx_firmware>>Versions from 1.0(inclusive) to 1.33(inclusive)

cpe:2.3:o:phoenixcontact:fl_switch_4012t_2gt_2fx_firmware:*:*:*:*:*:*:*:*

Phoenix Contact GmbH & Co. KG

>>fl_switch_4012t_2gt_2fx>>-

cpe:2.3:h:phoenixcontact:fl_switch_4012t_2gt_2fx:-:*:*:*:*:*:*:*

Phoenix Contact GmbH & Co. KG

>>fl_switch_4012t-2gt-2fx_st_firmware>>Versions from 1.0(inclusive) to 1.33(inclusive)

cpe:2.3:o:phoenixcontact:fl_switch_4012t-2gt-2fx_st_firmware:*:*:*:*:*:*:*:*

Phoenix Contact GmbH & Co. KG

>>fl_switch_4012t-2gt-2fx_st>>-

cpe:2.3:h:phoenixcontact:fl_switch_4012t-2gt-2fx_st:-:*:*:*:*:*:*:*

Phoenix Contact GmbH & Co. KG

>>fl_switch_4824e-4gc_firmware>>Versions from 1.0(inclusive) to 1.33(inclusive)

cpe:2.3:o:phoenixcontact:fl_switch_4824e-4gc_firmware:*:*:*:*:*:*:*:*

Phoenix Contact GmbH & Co. KG

>>fl_switch_4824e-4gc>>-

cpe:2.3:h:phoenixcontact:fl_switch_4824e-4gc:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-119	Primary	nvd@nist.gov

CWE ID: CWE-119

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.securityfocus.com/bid/104231	cve@mitre.org	Third Party Advisory VDB Entry
https://cert.vde.com/de-de/advisories/vde-2018-007	cve@mitre.org	Patch Third Party Advisory
https://ics-cert.us-cert.gov/advisories/ICSA-18-137-02	cve@mitre.org	Patch Third Party Advisory US Government Resource

Hyperlink: http://www.securityfocus.com/bid/104231

Source: cve@mitre.org

Resource:

Third Party Advisory

VDB Entry

Hyperlink: https://cert.vde.com/de-de/advisories/vde-2018-007

Source: cve@mitre.org

Resource:

Patch

Third Party Advisory

Hyperlink: https://ics-cert.us-cert.gov/advisories/ICSA-18-137-02

Source: cve@mitre.org

Resource:

Patch

Third Party Advisory

US Government Resource