https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T21:15:41.648666+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2019-03261 cnvd-2019-03261 2026-10-02T21:15:41.653838+00:00 cnvd-2019-03261 https://cve.radiocsirt.org/vuln/euvd-2026-66797 EUVD-2026-66797 2026-10-02T21:15:41.653871+00:00 EUVD-2026-66797 https://cve.radiocsirt.org/vuln/fkie_cve-2018-13994 fkie_cve-2018-13994 2026-10-02T21:15:41.653885+00:00

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 is vulnerable to a denial-of-service attack by making more than 120 connections.

 https://cve.radiocsirt.org/vuln/ghsa-9xc9-7qcm-99r9 GHSA-9xc9-7qcm-99r9 2026-10-02T21:15:41.653912+00:00

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 is vulnerable to a denial-of-service attack by making more than 120 connections.

 https://cve.radiocsirt.org/vuln/gsd-2018-13994 gsd-2018-13994 2026-10-02T21:15:41.653928+00:00 gsd-2018-13994 https://cve.radiocsirt.org/vuln/icsa-19-024-02 ICSA-19-024-02 — PHOENIX CONTACT FL SWITCH 2026-10-02T21:15:41.653939+00:00

This vulnerability may allow an attacker to trick the web browser into transmitting unwanted commands.CVE-2018-13993 has been assigned to this vulnerability. A CVSS v3 base score of 8.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). The switch lacks a login time-out feature to prevent high-speed automated username and password combination guessing. An attacker may gain access by brute forcing of usernames and passwords.CVE-2018-13990 has been assigned to this vulnerability. A CVSS v3 base score of 8.6 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L). The default setting of the Web UI (HTTP) allows user credentials to be transmitted unencrypted.CVE-2018-13992 has been assigned to this vulnerability. A CVSS v3 base score of 8.2 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N). An attacker can initiate a web denial-of-service attack by producing an excessive number of Web UI connections.CVE-2018-13994 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). An attacker may extract the switch 's default private keys from its firmware image.CVE-2018-13991 has been assigned to this vulnerability. A CVSS v3 base score of 5.3 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N). Buffer errors in the existing switch security library may allow a de…

 https://cve.radiocsirt.org/vuln/vde-2019-001 VDE-2019-001 — PHOENIX CONTACT: Multiple Vulnerabilities in FL SWITCH 3xxx, 4xxx and 48xx 2026-10-02T21:15:41.653972+00:00

Multiple vulnerabilities for FL SWITCH have been identified in PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx version 1.0 to 1.34.