FL SWITCH 2214-2FX SM vulnerabilities
12 known vulnerabilities in FL SWITCH 2214-2FX SM from Phoenix Contact. 12 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.1 High severity
FL SWITCH 2005: Cross-Site Request Forgery
A CSRF vulnerability in the Link Aggregation configuration interface allows an unauthenticated remote attacker to trick authenticated users into sending unauthorized POST requests to the device by luring them to a malicious webpage. This can silently alter the
- 7.1 High severity
FL SWITCH 2005: Improper Neutralization of Input During Web Page Generation
A stored cross‑site scripting (XSS) vulnerability in the Link Aggregation configuration interface allows an unauthenticated remote attacker to create a trunk entry containing malicious HTML/JavaScript code. When the affected page is viewed, the injected script
- 7.2 High severity
FL SWITCH 2005: Improper Neutralization of Special Elements used in a Command
A command injection vulnerability in the device’s Root CA certificate transfer workflow allows a high-privileged attacker to send crafted HTTP POST requests that result in arbitrary command execution on the underlying Linux OS with root privileges.
- 7.1 High severity
FL SWITCH 2005: Improper Neutralization of Input During Web Page Generation
An XSS vulnerability in pxc_portSfp.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to change parameters available via web based management (WBM). The vulnerability doe
- 7.1 High severity
FL SWITCH 2005: Improper Neutralization of Input During Web Page Generation
An XSS vulnerability in pxc_portCntr.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to change parameters available via web based management (WBM). The vulnerability do
- 7.1 High severity
FL SWITCH 2005: Improper Neutralization of Input During Web Page Generation
An XSS vulnerability in pxc_PortCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to change parameters available via web based management (WBM). The vulnerability doe
- 7.1 High severity
FL SWITCH 2005: Improper Neutralization of Input During Web Page Generation
An XSS vulnerability in port_util.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to change parameters available via web based management (WBM). The vulnerability does
- 7.1 High severity
FL SWITCH 2005: Improper Neutralization of Input During Web Page Generation
An XSS vulnerability in pxc_Dot1xCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to change parameters available via web based management (WBM). The vulnerability do
- 7.1 High severity
FL SWITCH 2005: Improper Neutralization of Input During Web Page Generation
An XSS vulnerability in pxc_vlanIntfCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in order to change parameters available via web based management (WBM). The vulnerabil
- 7.1 High severity
FL SWITCH 2005: Improper Neutralization of Input During Web Page Generation
An XSS vulnerability in pxc_portSecCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in order to change parameters available via web based management (WBM). The vulnerabili
- 7.1 High severity
FL SWITCH 2005: Improper Neutralization of Input During Web Page Generation
An XSS vulnerability in pxc_portCntr2.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in order to change parameters available via web based management (WBM). The vulnerabilit
- 7.1 High severity
FL SWITCH 2005: Improper Neutralization of Input During Web Page Generation
An XSS vulnerability in dyn_conn.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in order to change parameters available via web based management (WBM). The vulnerability doe