Phoenix Contact Fl Switch 2316/k1 vulnerabilities

8 CVEs affecting Phoenix Contact Fl Switch 2316/k1, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-22323, published 2026-03-18.

More from Phoenix Contact.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-22317, published 2026-03-18. High severity, CVSS 7.2. EPSS: 1% chance of exploitation in the next 30 days. A command injection vulnerability in the device’s Root CA certificate transfer workflow allows a high-privileged attacker to send crafted HTTP POST requests that result in arbitrary command execution…
• CVE-2026-22316, published 2026-03-18. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. A remote attacker with user privileges for the webUI can use the setting of the TFTP Filename with a POST Request to trigger a stack-based Buffer Overflow, resulting in a DoS attack.
• CVE-2026-22321, published 2026-03-18. Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days. A stack-based buffer overflow in the device's Telnet/SSH CLI login routine occurs when a unauthenticated attacker send an oversized or unexpected username input. An overflow condition crashes the…
• CVE-2026-22319, published 2026-03-18. Medium severity, CVSS 4.9. EPSS: 0.4% chance of exploitation in the next 30 days. A stack-based buffer overflow in the device's file installation workflow allows a high-privileged attacker to send oversized POST parameters that overflow a fixed-size stack buffer within an internal…
• CVE-2026-22318, published 2026-03-18. Medium severity, CVSS 4.9. EPSS: 0.4% chance of exploitation in the next 30 days. A stack-based buffer overflow vulnerability in the device's file transfer parameter workflow allows a high-privileged attacker to send oversized POST parameters, causing memory corruption in an…
• CVE-2026-22320, published 2026-03-18. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. A stack-based buffer overflow in the CLI's TFTP file‑transfer command handling allows a low-privileged attacker with Telnet/SSH access to trigger memory corruption by supplying unexpected or…
• CVE-2026-22322, published 2026-03-18. High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days. A stored cross‑site scripting (XSS) vulnerability in the Link Aggregation configuration interface allows an unauthenticated remote attacker to create a trunk entry containing malicious…
• CVE-2026-22323, published 2026-03-18. High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days. A CSRF vulnerability in the Link Aggregation configuration interface allows an unauthenticated remote attacker to trick authenticated users into sending unauthorized POST requests to the device by…