CVE-2018-13990: Phoenixcontact Fl Switch 3004t-Fx Firmware

Critical severity, CVSS 9.8. EPSS: 2.3% chance of exploitation in the next 30 days.

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions prior to 1.35 is vulnerable to brute-force attacks, because of Improper Restriction of Excessive Authentication Attempts.

Affected products

• Phoenixcontact Fl Switch 3004t-Fx Firmware: before 1.35 (fixed in 1.35)
• Phoenixcontact Fl Switch 3004t-Fx St Firmware: before 1.35 (fixed in 1.35)
• Phoenixcontact Fl Switch 3005 Firmware: before 1.35 (fixed in 1.35)
• Phoenixcontact Fl Switch 3005t Firmware: before 1.35 (fixed in 1.35)
• Phoenixcontact Fl Switch 3006t-2fx Firmware: before 1.35 (fixed in 1.35)
• Phoenixcontact Fl Switch 3006t-2fx Sm Firmware: before 1.35 (fixed in 1.35)
• Phoenixcontact Fl Switch 3006t-2fx St Firmware: before 1.35 (fixed in 1.35)
• Phoenixcontact Fl Switch 3008 Firmware: before 1.35 (fixed in 1.35)
• Phoenixcontact Fl Switch 3008t Firmware: before 1.35 (fixed in 1.35)
• Phoenixcontact Fl Switch 3012e-2fx Sm Firmware: before 1.35 (fixed in 1.35)
• Phoenixcontact Fl Switch 3012e-2sfx Firmware: before 1.35 (fixed in 1.35)
• Phoenixcontact Fl Switch 3016 Firmware: before 1.35 (fixed in 1.35)
• Phoenixcontact Fl Switch 3016e Firmware: before 1.35 (fixed in 1.35)
• Phoenixcontact Fl Switch 3016t Firmware: before 1.35 (fixed in 1.35)
• Phoenixcontact Fl Switch 4000t-8poe-2sfp-R Firmware: before 1.35 (fixed in 1.35)
• Phoenixcontact Fl Switch 4008t-2gt-3fx Sm Firmware: before 1.35 (fixed in 1.35)
• Phoenixcontact Fl Switch 4008t-2gt-4fx Sm Firmware: before 1.35 (fixed in 1.35)
• Phoenixcontact Fl Switch 4008t-2sfp Firmware: before 1.35 (fixed in 1.35)
• Phoenixcontact Fl Switch 4012t-2gt-2fx St Firmware: before 1.35 (fixed in 1.35)
• Phoenixcontact Fl Switch 4012t 2gt 2fx Firmware: before 1.35 (fixed in 1.35)
• Phoenixcontact Fl Switch 4800e-24fx-4gc Firmware: before 1.35 (fixed in 1.35)
• Phoenixcontact Fl Switch 4800e-24fx Sm-4gc Firmware: before 1.35 (fixed in 1.35)
• Phoenixcontact Fl Switch 4808e-16fx-4gc Firmware: before 1.35 (fixed in 1.35)
• Phoenixcontact Fl Switch 4808e-16fx Lc-4gc Firmware: before 1.35 (fixed in 1.35)
• Phoenixcontact Fl Switch 4808e-16fx Sm-4gc Firmware: before 1.35 (fixed in 1.35)
• and 4 more

Published 2019-05-06. Last modified 2026-06-17.