Back to Database
Status published
High
CVE-2022-22509
PHOENIX CONTACT: FL SWITCH 2xxx series incorrect privilege assignment
Vulnerability Description
In Phoenix Contact FL SWITCH Series 2xxx in version 3.00 an incorrect privilege assignment allows an low privileged user to enable full access to the device configuration.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-22509
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- This vulnerability was discovered internally.
More from phoenixcontact
View All →CVE-2020-9436
PHOENIX CONTACT TC ROUTER 3002T-4G through 2.05.3, TC ROUTER 2002T-3G...
High
8.8
CVE-2020-9435
PHOENIX CONTACT TC ROUTER 3002T-4G through 2.05.3, TC ROUTER 2002T-3G...
High
7.5
CVE-2020-8768
An issue was discovered on Phoenix Contact Emalytics Controller ILC...
Critical
9.4
CVE-2020-10940
Local Privilege Escalation can occur in PHOENIX CONTACT PORTICO SERVER...
High
7.8
CVE-2020-10939
Insecure, default path permissions in PHOENIX CONTACT PC WORX SRT...
High
7.8
Affected Vendor
phoenixcontact
View all reports →Affected Software
fl switch 2005 firmware, fl switch 2008 firmware, fl switch 2008f firmware, fl switch 2016 firmware, fl switch 2105 firmware, fl switch 2108 firmware, fl switch 2116 firmware, fl switch 2204-2tc-2sfx firmware, fl switch 2206-2fx firmware, fl switch 2206-2fx sm firmware, fl switch 2206-2fx sm st firmware, fl switch 2206-2fx st firmware, fl switch 2206-2sfx firmware, fl switch 2206-2sfx pn firmware, fl switch 2206c-2fx firmware, fl switch 2207-fx firmware, fl switch 2207-fx sm firmware, fl switch 2208 firmware, fl switch 2208c firmware, fl switch 2208 pn firmware, fl switch 2212-2tc-2sfx firmware, fl switch 2214-2fx firmware, fl switch 2214-2fx sm firmware, fl switch 2214-2sfx firmware, fl switch 2214-2sfx pn firmware, fl switch 2216 firmware, fl switch 2216 pn firmware, fl switch 2304-2gc-2sfp firmware, fl switch 2306-2sfp firmware, fl switch 2306-2sfp pn firmware, fl switch 2308 firmware, fl switch 2308 pn firmware, fl switch 2312-2gc-2sfp firmware, fl switch 2314-2sfp firmware, fl switch 2314-2sfp pn firmware, fl switch 2316 firmware, fl switch 2316\/k1 firmware, fl switch 2316 pn firmware, fl switch 2404-2tc-2sfx firmware, fl switch 2406-2sfx firmware, fl switch 2406-2sfx pn firmware, fl switch 2408 firmware, fl switch 2408 pn firmware, fl switch 2412-2tc-2sfx firmware, fl switch 2414-2sfx firmware, fl switch 2414-2sfx pn firmware, fl switch 2416 firmware, fl switch 2416 pn firmware, fl switch 2504-2gc-2sfp firmware, fl switch 2506-2sfp firmware, fl switch 2506-2sfp\/k1 firmware, fl switch 2506-2sfp pn firmware, fl switch 2508 firmware, fl switch 2508\/k1 firmware, fl switch 2508 pn firmware, fl switch 2512-2gc-2sfp firmware, fl switch 2514-2sfp firmware, fl switch 2514-2sfp pn firmware, fl switch 2516 firmware, fl switch 2516 pn firmware, fl switch 2608 firmware, fl switch 2608 pn firmware, fl switch 2708 firmware, fl switch 2708 pn firmware, fl switch 2205 firmware
Vulnerable Versions:
3.00
Timeline
Official Publish:
February 2nd, 2022
Last Modified:
September 17th, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.