CVE-2022-22509: Phoenixcontact Fl Switch 2005 Firmware

High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days.

In Phoenix Contact FL SWITCH Series 2xxx in version 3.00 an incorrect privilege assignment allows an low privileged user to enable full access to the device configuration.

Affected products

• Phoenixcontact Fl Switch 2005 Firmware: version 3.00 only
• Phoenixcontact Fl Switch 2008 Firmware: version 3.00 only
• Phoenixcontact Fl Switch 2008f Firmware: version 3.00 only
• Phoenixcontact Fl Switch 2016 Firmware: version 3.00 only
• Phoenixcontact Fl Switch 2105 Firmware: version 3.00 only
• Phoenixcontact Fl Switch 2108 Firmware: version 3.00 only
• Phoenixcontact Fl Switch 2116 Firmware: version 3.00 only
• Phoenixcontact Fl Switch 2204-2tc-2sfx Firmware: version 3.00 only
• Phoenixcontact Fl Switch 2205 Firmware: version 3.00 only
• Phoenixcontact Fl Switch 2206-2fx Firmware: version 3.00 only
• Phoenixcontact Fl Switch 2206-2fx Sm Firmware: version 3.00 only
• Phoenixcontact Fl Switch 2206-2fx Sm St Firmware: version 3.00 only
• Phoenixcontact Fl Switch 2206-2fx St Firmware: version 3.00 only
• Phoenixcontact Fl Switch 2206-2sfx Firmware: version 3.00 only
• Phoenixcontact Fl Switch 2206-2sfx Pn Firmware: version 3.00 only
• Phoenixcontact Fl Switch 2206c-2fx Firmware: version 3.00 only
• Phoenixcontact Fl Switch 2207-Fx Firmware: version 3.00 only
• Phoenixcontact Fl Switch 2207-Fx Sm Firmware: version 3.00 only
• Phoenixcontact Fl Switch 2208 Firmware: version 3.00 only
• Phoenixcontact Fl Switch 2208 Pn Firmware: version 3.00 only
• Phoenixcontact Fl Switch 2208c Firmware: version 3.00 only
• Phoenixcontact Fl Switch 2212-2tc-2sfx Firmware: version 3.00 only
• Phoenixcontact Fl Switch 2214-2fx Firmware: version 3.00 only
• Phoenixcontact Fl Switch 2214-2fx Sm Firmware: version 3.00 only
• Phoenixcontact Fl Switch 2214-2sfx Firmware: version 3.00 only
• and 40 more

Published 2022-02-02. Last modified 2026-06-17.