جزئیات آسیبپذیری
CVE-2026-22317
Phoenix Contact FL NATPhoenix Contact FL NAT 2208Phoenix Contact FL NAT 2304-2GC-2SFPPhoenix Contact FL SWITCHPhoenix Contact FL SWITCH 2008FPhoenix Contact FL SWITCH 2105
Command Injection Vulnerability in Root CA Certificate Transfer Workflow
CVSS 3.1
7.2بالا
شرح رسمی (انگلیسی)
A command injection vulnerability in the device’s Root CA certificate transfer workflow allows a high-privileged attacker to send crafted HTTP POST requests that result in arbitrary command execution on the underlying Linux OS with root privileges.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 7.2بالا | 3.1 | CVEProject cvelistV5 (CNA) (CERTVDE) | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
محصولات آسیبپذیر
| فروشنده | محصول | نسخهها | منبع |
|---|---|---|---|
| Phoenix Contact | FL NAT 2008 | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL NAT 2208 | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL NAT 2304-2GC-2SFP | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2005 | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2008 | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2008F | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2016 | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2105 | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2108 | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2116 | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2204-2TC-2SFX | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2205 | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2206-2FX | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2206-2FX SM | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2206-2FX SM ST | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2206-2FX ST | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2206-2SFX | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2206-2SFX PN | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2206C-2FX | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2207-FX | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2207-FX SM | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2208 | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2208 PN | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2208C | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2212-2TC-2SFX | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2214-2FX | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2214-2FX SM | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2214-2SFX | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2214-2SFX PN | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2216 | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2216 PN | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2303-8SP1 | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2304-2GC-2SFP | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2306-2SFP | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2306-2SFP PN | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2308 | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2308 PN | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2312-2GC-2SFP | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2314-2SFP | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2314-2SFP PN | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2316 | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2316 PN | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2316/K1 | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2404-2TC-2SFX | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2406-2SFX | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2406-2SFX PN | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2408 | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2408 PN | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2412-2TC-2SFX | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2414-2SFX | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2414-2SFX PN | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2416 | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2416 PN | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2504-2GC-2SFP | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2506-2SFP | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2506-2SFP PN | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2506-2SFP/K1 | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2508 | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2508 PN | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2508/K1 | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2512-2GC-2SFP | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2514-2SFP | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2514-2SFP PN | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2516 | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2516 PN | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2608 | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2608 PN | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2708 | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 2708 PN | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 5916-8GC-4SFP+ | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 5916SFP-8GC-4SFP+ | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 5924-4GC | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 5924-4SFP+ | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH 5924SFP-4GC | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH TSN 2312-2GC-2SFP | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH TSN 2314-2SFP | v < 3.53 | CVEProject cvelistV5 (CNA) |
| Phoenix Contact | FL SWITCH TSN 2316 | v < 3.53 | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۱
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیبپذیریهای تازه را در تلگرام بگیرید.
اطلاعات
- تاریخ انتشار
- ۱۴۰۴/۱۲/۲۷
- آخرین بهروزرسانی
- ۱۴۰۴/۱۲/۲۷
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- CERTVDE
پیشبینی بهرهبرداری (EPSS)
۱٫۰۳٪
احتمال بهرهبرداری در ۳۰ روز
۶۴٫۱٪
صدک (نسبت به همهی CVEها)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- خیر
- وضعیت بهرهبرداری
- ندارد
- اثر فنی
- کامل
ضعفها (CWE)
- CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')