CVE-2018-13993

—

CVSS 3.0

8.8 high

EPSS

<1%p56

Published

May 7, 2019 (May 7, 2019)

Modified

Jun 17, 2026

Description

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 is prone to CSRF.

Vendors: phoenixcontact
Products: fl switch 3005 firmware, fl switch 3005t firmware, fl switch 3004t-fx firmware, fl switch 3004t-fx st firmware, fl switch 3008 firmware, fl switch 3008t firmware, fl switch 3006t-2fx firmware, fl switch 3006t-2fx st firmware, fl switch 3012e-2sfx firmware, fl switch 3016e firmware, fl switch 3016 firmware, fl switch 3016t firmware
Weakness: CWE-352
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.