High · published December 9, 2025
⚡ This XSS vulnerability could let an attacker manipulate device settings just by tricking an authenticated user into clicking a link! 🤯 Think of it like a restaurant that serves takeout—but the chef accidentally leaves the order slip lying around. An attacker could swap a customer's order by telling them to place a new one while they are distracted, changing the meal before it’s prepared. With this vulnerability, an attacker could alter device configurations via the web management interface. Although they can't access sensitive system-level resources or hijack user sessions due to the httpOnly cookie, they still can make unwanted changes that could disrupt operations or open the door to further attacks.
Think of it like a restaurant that serves takeout—but the chef accidentally leaves the order slip lying around. An attacker could swap a customer's order by telling them to place a new one while they are distracted, changing the meal before it’s prepared. This vulnerability in pxc_portCntr2.php allows unauthenticated attackers to craft a manipulated POST request that alters accessible device parameters, exploiting how the web application handles user interactions without proper validation.
With this vulnerability, an attacker could alter device configurations via the web management interface. Although they can't access sensitive system-level resources or hijack user sessions due to the httpOnly cookie, they still can make unwanted changes that could disrupt operations or open the door to further attacks. To mitigate this risk, ensure your applications validate all user inputs thoroughly and consider implementing CSRF tokens to prevent unauthorized actions. Regularly update your software and review configuration settings for additional security measures. You've got this! By following these steps, you can secure your application against this sneaky vulnerability. 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| phoenixcontact/fl_nat_2008_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_nat_2208_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_nat_2304-2gc-2sfp_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2005_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2008_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2008f_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2016_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2105_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2108_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2116_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2204-2tc-2sfx_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2205_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2206-2fx_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2206-2fx_sm_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2206-2fx_sm_st_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2206-2fx_st_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2206-2sfx_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2206-2sfx_pn_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2206c-2fx_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2207-fx_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2207-fx_sm_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2208_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2208_pn_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2208c_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2212-2tc-2sfx_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2214-2fx_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2214-2fx_sm_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2214-2sfx_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2214-2sfx_pn_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2216_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2216_pn_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2303-8sp1 | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2304-2gc-2sfp_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2306-2sfp_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2306-2sfp_pn_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2308_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2308_pn_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2312-2gc-2sfp_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2314-2sfp_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2314-2sfp_pn_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2316_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2316\/k1_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2316_pn_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2404-2tc-2sfx_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2406-2sfx_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2406-2sfx_pn_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2408_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2408_pn_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2412-2tc-2sfx_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2414-2sfx_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2414-2sfx_pn_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2416_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2416_pn_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2504-2gc-2sfp_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2506-2sfp_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2506-2sfp\/k1_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2506-2sfp_pn_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2508_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2508\/k1_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2508_pn_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2512-2gc-2sfp_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2514-2sfp_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2514-2sfp_pn_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2516_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2516_pn_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2608_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2608_pn_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2708_firmware | < 3.50 | 3.50 |
| phoenixcontact/fl_switch_2708_pn_firmware | < 3.50 | 3.50 |