CVE-2017-16741: Infoleak
Published Jan 12, 2018
·Updated
An Information Exposure issue was discovered in PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, and 48xxx Series products running firmware Version 1.0 to 1.32. A remote unauthenticated attacker may be able to use Monitor Mode on the device to read diagnostic information.
Affected Software
58 affected components
Phoenixcontact Fl Switch 3005 Firmware>=1.0<=1.32
Phoenixcontact Fl Switch 3005
Phoenixcontact Fl Switch 3005t Firmware>=1.0<=1.32
Phoenixcontact Fl Switch 3005t
Phoenixcontact Fl Switch 3004t-fx Firmware>=1.0<=1.32
Phoenixcontact Fl Switch 3004t-fx
Phoenixcontact Fl Switch 3004t-fx St Firmware>=1.0<=1.32
Phoenixcontact Fl Switch 3004t-fx St
Phoenixcontact Fl Switch 3008 Firmware>=1.0<=1.32
Phoenixcontact Fl Switch 3008
Phoenixcontact Fl Switch 3008t Firmware>=1.0<=1.32
Phoenixcontact Fl Switch 3008t
Phoenixcontact Fl Switch 3006t-2fx Firmware>=1.0<=1.32
Phoenixcontact Fl Switch 3006t-2fx
Phoenixcontact Fl Switch 3006t-2fx St Firmware>=1.0<=1.32
Phoenixcontact Fl Switch 3006t-2fx St
Phoenixcontact Fl Switch 3012e-2sfx Firmware>=1.0<=1.32
Phoenixcontact Fl Switch 3012e-2sfx
Phoenixcontact Fl Switch 3016e Firmware>=1.0<=1.32
Phoenixcontact Fl Switch 3016e
Phoenixcontact Fl Switch 3016 Firmware>=1.0<=1.32
Phoenixcontact Fl Switch 3016
Phoenixcontact Fl Switch 3016t Firmware>=1.0<=1.32
Phoenixcontact Fl Switch 3016t
Phoenixcontact Fl Switch 3006t-2fx Sm Firmware>=1.0<=1.32
Phoenixcontact Fl Switch 3006t-2fx Sm
Phoenixcontact Fl Switch 4008t-2sfp Firmware>=1.0<=1.32
Phoenixcontact Fl Switch 4008t-2sfp
Phoenixcontact Fl Switch 4008t-2gt-4fx Sm Firmware>=1.0<=1.32
Phoenixcontact Fl Switch 4008t-2gt-4fx Sm
Phoenixcontact Fl Switch 4008t-2gt-3fx Sm Firmware>=1.0<=1.32
Phoenixcontact Fl Switch 4008t-2gt-3fx Sm
Phoenixcontact Fl Switch 4808e-16fx Lc-4gc Firmware>=1.0<=1.32
Phoenixcontact Fl Switch 4808e-16fx Lc-4gc
Phoenixcontact Fl Switch 4808e-16fx Sm-4gc Firmware>=1.0<=1.32
Phoenixcontact Fl Switch 4808e-16fx Sm-4gc
Phoenixcontact Fl Switch 4808e-16fx Sm St-4gc Firmware>=1.0<=1.32
Phoenixcontact Fl Switch 4808e-16fx Sm St-4gc
Phoenixcontact Fl Switch 4808e-16fx St-4gc Firmware>=1.0<=1.32
Phoenixcontact Fl Switch 4808e-16fx St-4gc
Phoenixcontact Fl Switch 4808e-16fx-4gc Firmware>=1.0<=1.32
Phoenixcontact Fl Switch 4808e-16fx-4gc
Phoenixcontact Fl Switch 4808e-16fx Sm Lc-4gc Firmware>=1.0<=1.32
Phoenixcontact Fl Switch 4808e-16fx Sm Lc-4gc
Phoenixcontact Fl Switch 4012t 2gt 2fx Firmware>=1.0<=1.32
Phoenixcontact Fl Switch 4012t 2gt 2fx
Phoenixcontact Fl Switch 4012t-2gt-2fx St Firmware>=1.0<=1.32
Phoenixcontact Fl Switch 4012t-2gt-2fx St
Phoenixcontact Fl Switch 4824e-4gc Firmware>=1.0<=1.32
Phoenixcontact Fl Switch 4824e-4gc
Phoenixcontact Fl Switch 4800e-24fx-4gc Firmware>=1.0<=1.32
Phoenixcontact Fl Switch 4800e-24fx-4gc
Phoenixcontact Fl Switch 4800e-24fx Sm-4gc Firmware>=1.0<=1.32
Phoenixcontact Fl Switch 4800e-24fx Sm-4gc
Phoenixcontact Fl Switch 3012e-2fx Sm Firmware>=1.0<=1.32
Phoenixcontact Fl Switch 3012e-2fx Sm
Phoenixcontact Fl Switch 4000t-8poe-2sfp-r Firmware>=1.0<=1.32
Phoenixcontact Fl Switch 4000t-8poe-2sfp-r
Remediation
Patch Available
Event History
Jan 12, 2018
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-16741?
The severity of CVE-2017-16741 is rated as medium with a score of 5.3.
2
How do I fix CVE-2017-16741?
To fix CVE-2017-16741, update the firmware of the affected Phoenix Contact FL Switch devices to a version beyond 1.32.
3
What are the affected products of CVE-2017-16741?
CVE-2017-16741 affects Phoenix Contact FL Switch 3xxx, 4xxx, and 48xxx Series devices running firmware versions 1.0 to 1.32.
4
What type of vulnerability is CVE-2017-16741?
CVE-2017-16741 is classified as an Information Exposure vulnerability.
5
Can CVE-2017-16741 be exploited remotely?
Yes, CVE-2017-16741 can be exploited by a remote unauthenticated attacker using Monitor Mode on the device.