CVE-2019-18352 : Improper access control exists on PHOENIX CONTACT FL NAT 2208 devices before V2.90 and FL NAT 2304-2GC-2SFP devices befo

Improper access control exists on PHOENIX CONTACT FL NAT 2208 devices before V2.90 and FL NAT 2304-2GC-2SFP devices before V2.90 when using MAC-based port security.

Published 2020-02-18 16:15:11

Updated 2020-08-24 17:37:01

Source MITRE

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2019-18352

EPSS FAQ

0.06%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 23 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2019-18352

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.3	MEDIUM	AV:A/AC:M/Au:N/C:N/I:P/A:P	5.5	4.9	NIST
Access Vector: Adjacent Network Access Complexity: Medium Authentication: None Confidentiality Impact: None Integrity Impact: Partial Availability Impact: Partial
8.2	HIGH	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:L	2.8	4.7	NIST
Attack Vector: Adjacent Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Changed Confidentiality: None Integrity: High Availability: Low

Products affected by CVE-2019-18352

Phoenixcontact » Fl Nat 2208 Firmware
Versions before (<) 2.90
cpe:2.3:o:phoenixcontact:fl_nat_2208_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Phoenixcontact » Fl Nat 2208 » Version: N/A
Phoenixcontact » Fl Nat 2304-2gc-2sfp Firmware
Versions before (<) 2.90
cpe:2.3:o:phoenixcontact:fl_nat_2304-2gc-2sfp_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Phoenixcontact » Fl Nat 2304-2gc-2sfp » Version: N/A

Vulnerability Details : CVE-2019-18352

Exploit prediction scoring system (EPSS) score for CVE-2019-18352

CVSS scores for CVE-2019-18352

References for CVE-2019-18352

Products affected by CVE-2019-18352