CVE-2017-16741

EPSS 1.2%CWE-200

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 1.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

12 Jan 2018Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

An Information Exposure issue was discovered in PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, and 48xxx Series products running firmware Version 1.0 to 1.32. A remote unauthenticated attacker may be able to use Monitor Mode on the device to read diagnostic information.

Affected products

n/a · PHOENIX CONTACT FL SWITCH

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://cert.vde.com/en-us/advisories/vde-2017-006 https://ics-cert.us-cert.gov/advisories/ICSA-18-011-03