Phoenix Contact FL SWITCH 2xxx Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in Phoenix Contact FL SWITCH 2xxx firmware prior to version 3.50. This vulnerability allows a low-privileged remote attacker to execute a web shell with an empty command that contains whitespace. The server will then hang until it receives additional data, creating a denial-of-service condition on the web server.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition on the affected device's web server.

Remediation

Users are advised to update to the latest FL SWITCH 2xxx firmware version 3.50, which addresses this vulnerability.