CVE-2018-13992

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 allows for plaintext transmission (HTTP) of user credentials by default

High · published May 7, 2019

CVSS v3.0
8.2
EPSS
1%
Percentile
65.4
In the wild
Unconfirmed
What it is

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 allows for plaintext transmission (HTTP) of user credentials by default.

The record
Technical detail
CVSS v3.0
8.2 · HIGH
Vector
CVSS:3.0/AC:L/AV:N/A:N/C:H/I:L/PR:N/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.01110 · 65.4th percentile
Published
2019-05-07T17:28Z
EPSS history
Timeline
  • 07 MAY 17:28Z
    The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 allows for plaintext transmission (HTTP) of user credentials by default
    cvelistv5