Description
A stack-based buffer overflow in the device's file installation workflow allows a high-privileged attacker to send oversized POST parameters that overflow a fixed-size stack buffer within an internal process, resulting in a DoS attack.
Metrics
CVSS 3.1 4.9/10
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:HWeakness enumeration
Affected software
Source: the vendor's advisory (CNA). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Phoenix Contact | FL SWITCH 2005 | >= 0.0.0, < 3.53 |
| Phoenix Contact | FL SWITCH 2008 | >= 0.0.0, < 3.53 |
| Phoenix Contact | FL SWITCH 2016 | >= 0.0.0, < 3.53 |
| Phoenix Contact | FL SWITCH 2105 | >= 0.0.0, < 3.53 |
| Phoenix Contact | FL SWITCH 2108 | >= 0.0.0, < 3.53 |
| Phoenix Contact | FL SWITCH 2116 | >= 0.0.0, < 3.53 |
| Phoenix Contact | FL SWITCH 2204-2TC-2SFX | >= 0.0.0, < 3.53 |
| Phoenix Contact | FL SWITCH 2205 | >= 0.0.0, < 3.53 |
| Phoenix Contact | FL SWITCH 2206-2FX | >= 0.0.0, < 3.53 |
| Phoenix Contact | FL SWITCH 2206-2FX SM | >= 0.0.0, < 3.53 |
| Phoenix Contact | FL SWITCH 2206-2FX SM ST | >= 0.0.0, < 3.53 |
| Phoenix Contact | FL SWITCH 2206-2FX ST | >= 0.0.0, < 3.53 |
| Phoenix Contact | FL SWITCH 2206-2SFX | >= 0.0.0, < 3.53 |
| Phoenix Contact | FL SWITCH 2206-2SFX PN | >= 0.0.0, < 3.53 |
| Phoenix Contact | FL SWITCH 2206C-2FX | >= 0.0.0, < 3.53 |
| Phoenix Contact | FL SWITCH 2207-FX | >= 0.0.0, < 3.53 |
| Phoenix Contact | FL SWITCH 2207-FX SM | >= 0.0.0, < 3.53 |
| Phoenix Contact | FL SWITCH 2208 | >= 0.0.0, < 3.53 |
| Phoenix Contact | FL SWITCH 2208 PN | >= 0.0.0, < 3.53 |
| Phoenix Contact | FL SWITCH 2208C | >= 0.0.0, < 3.53 |
| Phoenix Contact | FL SWITCH 2212-2TC-2SFX | >= 0.0.0, < 3.53 |
| Phoenix Contact | FL SWITCH 2214-2FX | >= 0.0.0, < 3.53 |
| Phoenix Contact | FL SWITCH 2214-2FX SM | >= 0.0.0, < 3.53 |
| Phoenix Contact | FL SWITCH 2214-2SFX | >= 0.0.0, < 3.53 |
| Phoenix Contact | FL SWITCH 2214-2SFX PN | >= 0.0.0, < 3.53 |
| Phoenix Contact | FL SWITCH 2216 | >= 0.0.0, < 3.53 |
| Phoenix Contact | FL SWITCH 2216 PN | >= 0.0.0, < 3.53 |
| Phoenix Contact | FL SWITCH 2304-2GC-2SFP | >= 0.0.0, < 3.53 |
| Phoenix Contact | FL SWITCH 2306-2SFP | >= 0.0.0, < 3.53 |
| Phoenix Contact | FL SWITCH 2306-2SFP PN | >= 0.0.0, < 3.53 |
| Phoenix Contact | FL SWITCH 2308 | >= 0.0.0, < 3.53 |
| Phoenix Contact | FL SWITCH 2308 PN | >= 0.0.0, < 3.53 |
| Phoenix Contact | FL SWITCH 2312-2GC-2SFP | >= 0.0.0, < 3.53 |
| Phoenix Contact | FL SWITCH 2314-2SFP | >= 0.0.0, < 3.53 |
| Phoenix Contact | FL SWITCH 2314-2SFP PN | >= 0.0.0, < 3.53 |
| Phoenix Contact | FL SWITCH 2316 | >= 0.0.0, < 3.53 |
| Phoenix Contact | FL SWITCH 2316 PN | >= 0.0.0, < 3.53 |
| Phoenix Contact | FL SWITCH 2404-2TC-2SFX | >= 0.0.0, < 3.53 |
| Phoenix Contact | FL SWITCH 2406-2SFX | >= 0.0.0, < 3.53 |
| Phoenix Contact | FL SWITCH 2406-2SFX PN | >= 0.0.0, < 3.53 |
| Phoenix Contact | FL SWITCH 2408 | >= 0.0.0, < 3.53 |
| Phoenix Contact | FL SWITCH 2408 PN | >= 0.0.0, < 3.53 |
| Phoenix Contact | FL SWITCH 2412-2TC-2SFX | >= 0.0.0, < 3.53 |
| Phoenix Contact | FL SWITCH 2414-2SFX | >= 0.0.0, < 3.53 |
| Phoenix Contact | FL SWITCH 2414-2SFX PN | >= 0.0.0, < 3.53 |
| Phoenix Contact | FL SWITCH 2416 | >= 0.0.0, < 3.53 |
| Phoenix Contact | FL SWITCH 2416 PN | >= 0.0.0, < 3.53 |
| Phoenix Contact | FL SWITCH 2504-2GC-2SFP | >= 0.0.0, < 3.53 |
| Phoenix Contact | FL SWITCH 2506-2SFP | >= 0.0.0, < 3.53 |
| Phoenix Contact | FL SWITCH 2506-2SFP PN | >= 0.0.0, < 3.53 |
References
Timeline
- Published
- Mar 18, 2026
- Last modified
- Jun 17, 2026
- NVD status
- Awaiting Analysis