← Database

CVE-2022-22509

HIGH CVSS: 8.8 Published: 2022-02-02 Modified: 2026-06-17

Description

In Phoenix Contact FL SWITCH Series 2xxx in version 3.00 an incorrect privilege assignment allows an low privileged user to enable full access to the device configuration.

Affected Platforms

Phoenixcontact Fl Switch 2408Phoenixcontact Fl Switch 2406-2Sfx Pn FirmwarePhoenixcontact Fl Switch 2306-2Sfp Pn FirmwarePhoenixcontact Fl Switch 2304-2Gc-2SfpPhoenixcontact Fl Switch 2416 Pn FirmwarePhoenixcontact Fl Switch 2508\/K1Phoenixcontact Fl Switch 2214-2Fx Sm FirmwarePhoenixcontact Fl Switch 2116Phoenixcontact Fl Switch 2406-2SfxPhoenixcontact Fl Switch 2408 Pn Firmware

Weakness Type

CWE-269

References