Phoenix Contact FL SWITCH Products Stack-Based Buffer Overflow Vulnerability Leading to Denial-of-Service

A stack-based buffer overflow vulnerability has been identified in Phoenix Contact FL SWITCH 2xxx, FL SWITCH TSN 23xx, and FL SWITCH 59xx firmware prior to version 3.53. This vulnerability allows a high-privileged attacker to send oversized POST parameters during the file transfer parameter workflow, causing memory corruption in an internal process and resulting in a denial-of-service condition.

Impact

Exploitation of this vulnerability leads to memory corruption, causing a denial-of-service condition on the device.

Remediation

Users are advised to update to the latest firmware version 3.53, which addresses this vulnerability.