CVE-2019-18352
High
Description
Improper access control exists on PHOENIX CONTACT FL NAT 2208 devices before V2.90 and FL NAT 2304-2GC-2SFP devices before V2.90 when using MAC-based port security.
SeverityHigh
CVSS8.2
Exploit probability—
ProductPhoenixcontact Fl Nat 2208 Firmware
PublishedFeb 18, 2020
First seenFeb 18, 2020
How to fix
Update
- phoenixcontact fl_nat_2208_firmware2.90 or later
- phoenixcontact fl_nat_2304-2gc-2sfp_firmware2.90 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phoenixcontact fl_nat_2208_firmware | v < 2.90 | 2.90 |
| phoenixcontact fl_nat_2304-2gc-2sfp_firmware | v < 2.90 | 2.90 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.