CVSS 3.0
9.8 criticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2018-13992
Critical (9.8) in phoenixcontact. EPSS 1.1% chance of exploitation in the next 30 days.
The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 allows for plaintext transmission (HTTP) of user credentials by default.
Severity
- EPSS
- 1.1% chance of exploitation in the next 30 days; higher than 65% of CVEs (scores of 2026-10-31)
- CWE
- CWE-311
- Published
- Modified
- Record from
- the NVD, synced
Affected
- phoenixcontact:fl_switch_3004t-fx_firmware
- phoenixcontact:fl_switch_3004t-fx_st_firmware
- phoenixcontact:fl_switch_3005_firmware
- phoenixcontact:fl_switch_3005t_firmware
- phoenixcontact:fl_switch_3006t-2fx_firmware
- phoenixcontact:fl_switch_3006t-2fx_sm_firmware
- phoenixcontact:fl_switch_3006t-2fx_st_firmware
- phoenixcontact:fl_switch_3008_firmware
- phoenixcontact:fl_switch_3008t_firmware
- phoenixcontact:fl_switch_3012e-2fx_sm_firmware
- phoenixcontact:fl_switch_3012e-2sfx_firmware
- phoenixcontact:fl_switch_3016_firmware
- phoenixcontact:fl_switch_3016e_firmware
- phoenixcontact:fl_switch_3016t_firmware
- phoenixcontact:fl_switch_4000t-8poe-2sfp-r_firmware
- phoenixcontact:fl_switch_4008t-2gt-3fx_sm_firmware
- phoenixcontact:fl_switch_4008t-2gt-4fx_sm_firmware
- phoenixcontact:fl_switch_4008t-2sfp_firmware
- phoenixcontact:fl_switch_4012t-2gt-2fx_st_firmware
- phoenixcontact:fl_switch_4012t_2gt_2fx_firmware
- phoenixcontact:fl_switch_4800e-24fx-4gc_firmware
- phoenixcontact:fl_switch_4800e-24fx_sm-4gc_firmware
- phoenixcontact:fl_switch_4808e-16fx-4gc_firmware
- phoenixcontact:fl_switch_4808e-16fx_lc-4gc_firmware
- phoenixcontact:fl_switch_4808e-16fx_sm-4gc_firmware
- phoenixcontact:fl_switch_4808e-16fx_sm_lc-4gc_firmware
- phoenixcontact:fl_switch_4808e-16fx_sm_st-4gc_firmware
- phoenixcontact:fl_switch_4808e-16fx_st-4gc_firmware
- phoenixcontact:fl_switch_4824e-4gc_firmware