Phoenix Contact FL SWITCH 2xxx Password Brute-Force Vulnerability

A vulnerability exists in Phoenix Contact FL SWITCH 2xxx firmware versions prior to 3.50, allowing high-privileged remote attackers with admin rights in the web interface to brute-force the 'root' and 'user' passwords of the underlying operating system. This issue arises from a weak password generation algorithm.

Impact

Exploitation of this vulnerability could lead to unauthorized access to the device's file system by allowing attackers to gain administrative privileges on the underlying operating system.

Remediation

Users are advised to update to the latest 3.50 firmware release, which addresses this vulnerability.