Known vulnerabilities in FL SWITCH 4808E-16FX SM LC-4GC

Known vulnerabilities in FL SWITCH 4808E-16FX SM LC-4GC

Vendor: Phoenix Contact GmbH

Software: FL SWITCH 4808E-16FX SM LC-4GC

Software CPE: cpe:2.3:h:phoenix_contact_gmbh:fl_switch_4808e-16fx_sm_lc-4gc:*:*:*:*:*:*:*:*

Website: https://www.phoenixcontact-cybersecurity.com/de/

Total vulnerabilities: 12

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (12)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU17217 - Resource exhaustion CVE-2018-13994	CWE-400	Low	No	No	-	25.01.2019	SB2019012510
#VU17216 - Insecure Storage of Sensitive Information CVE-2018-13991	CWE-922	Low	No	No	-	25.01.2019	SB2019012510
#VU17215 - Cleartext Transmission of Sensitive Information CVE-2018-13992	CWE-319	Low	No	No	-	25.01.2019	SB2019012510
#VU17214 - Improper Restriction of Excessive Authentication Attempts CVE-2018-13990	CWE-307	Low	No	No	-	25.01.2019	SB2019012510
#VU17213 - Cross-Site Request Forgery (CSRF) CVE-2018-13993	CWE-352	Low	No	No	-	24.01.2019	SB2019012510
#VU12816 - Stack-based buffer overflow CVE-2018-10731	CWE-121	High	No	No	-	18.05.2018	SB2018051807
#VU12815 - Stack-based buffer overflow CVE-2018-10728	CWE-121	High	No	No	-	18.05.2018	SB2018051807 SB2018062714
#VU12814 - Exposure of sensitive information to an unauthorized actor CVE-2018-10729	CWE-200	Low	No	No	-	18.05.2018	SB2018051807 SB2018062714
#VU12813 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2018-10730	CWE-78	High	No	No	-	18.05.2018	SB2018051807
#VU10011 - Exposure of sensitive information to an unauthorized actor CVE-2017-16741	CWE-200	Low	No	No	-	16.01.2018	SB2018011602
#VU10010 - Improper Authorization CVE-2017-16743	CWE-285	Low	No	No	-	16.01.2018	SB2018011602
#VU8487 - Out-of-bounds read CVE-2017-3735	CWE-125	Low	No	No	-	28.08.2017	SB2017082906 SB2017110401 SB2017110402 and 30 more