CVE-2019-18352: High severity phoenix contact fl nat 2208 firmware vulnerability
Published Feb 18, 2020
·Updated
Improper access control exists on PHOENIX CONTACT FL NAT 2208 devices before V2.90 and FL NAT 2304-2GC-2SFP devices before V2.90 when using MAC-based port security.
Affected Software
4 affected components
Phoenixcontact Fl Nat 2208 Firmware<2.90
Phoenixcontact Fl Nat 2208
Phoenixcontact Fl Nat 2304-2gc-2sfp Firmware<2.90
Phoenixcontact Fl Nat 2304-2gc-2sfp
Event History
Feb 18, 2020
CVE Published
via MITRE·03:15 PM
Data Sourced
via MITRE·03:15 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-18352?
The severity of CVE-2019-18352 is considered high due to the improper access control on the affected devices.
2
What devices are affected by CVE-2019-18352?
CVE-2019-18352 affects PHOENIX CONTACT FL NAT 2208 devices before version 2.90 and FL NAT 2304-2GC-2SFP devices before version 2.90.
3
How do I fix CVE-2019-18352?
To fix CVE-2019-18352, upgrade the firmware of affected devices to version 2.90 or later.
4
What type of vulnerability is CVE-2019-18352?
CVE-2019-18352 is classified as an improper access control vulnerability.
5
Can CVE-2019-18352 be exploited remotely?
Yes, CVE-2019-18352 can be exploited remotely if the affected devices are accessible over the network.