CVE-2018-10729
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
PHOENIX CONTACT FL SWITCH 3xxx、4xxx和48xxx Series等都是德国菲尼克斯电气（Phoenix Contact）集团的不同系列的交换机设备。 使用1.0版本至1.32版本固件的Phoenix Contact FL SWITCH 3xxx、4xxx和48xxx Series产品中存在信息泄露漏洞。攻击者可利用该漏洞读取配置文件内容。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2018-10729
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 allow reading the configuration file by an unauthenticated user.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
PHOENIX CONTACT FL SWITCH 3xxx、4xxx和48xxx Series 信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
PHOENIX CONTACT FL SWITCH 3xxx、4xxx和48xxx Series等都是德国菲尼克斯电气（Phoenix Contact）集团的不同系列的交换机设备。 使用1.0版本至1.32版本固件的Phoenix Contact FL SWITCH 3xxx、4xxx和48xxx Series产品中存在信息泄露漏洞。攻击者可利用该漏洞读取配置文件内容。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2018-10729
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2018-10729
请登录查看更多情报信息。
Vendor Advisories for CVE-2018-10729 (1)
Other References for CVE-2018-10729 (2)
-
https://cert.vde.com/de-de/advisories/vde-2018-005 x_refsource_CONFIRM
-
https://ics-cert.us-cert.gov/advisories/ICSA-18-137-02 x_refsource_MISC
Same Patch Batch · n/a · 2018-05-17 · 41 CVEs total
| CVE-2018-0280 | Cisco Meeting Server 输入验证漏洞 | |
| CVE-2018-11224 | Libav 安全漏洞 | |
| CVE-2018-11225 | libming 安全漏洞 | |
| CVE-2018-11226 | libming 安全漏洞 | |
| CVE-2018-0222 | Cisco Digital Network Architecture Center 安全漏洞 | |
| CVE-2018-0268 | Cisco Digital Network Architecture Center 安全漏洞 | |
| CVE-2018-0270 | Cisco IoT Field Network Director 跨站请求伪造漏洞 | |
| CVE-2018-0271 | Cisco Digital Network Architecture Center API gateway 授权问题漏洞 | |
| CVE-2018-0277 | Cisco Identity Services Engine 安全漏洞 | |
| CVE-2018-0279 | Cisco Enterprise NFV Infrastructure Software Secure Copy Protocol服务器输入验证错误漏洞 | |
| CVE-2018-11230 | jbig2enc 安全漏洞 | |
| CVE-2018-0289 | Cisco Identity Services Engine logs组件跨站脚本漏洞 | |
| CVE-2018-0290 | Cisco SocialMiner 资源管理错误漏洞 | |
| CVE-2018-0297 | Cisco Firepower Threat Defense detection引擎安全漏洞 | |
| CVE-2018-0323 | Cisco Enterprise NFV Infrastructure Software 路径遍历漏洞 | |
| CVE-2018-0324 | Cisco Enterprise NFV Infrastructure Software CLI 命令注入漏洞 | |
| CVE-2018-0325 | Cisco IP Phone 7800 Series和Cisco IP Phone 8800 Series 输入验证漏洞 | |
| CVE-2018-0326 | Cisco TelePresence Server Software Web UI 安全漏洞 | |
| CVE-2018-0327 | Cisco Identity Services Engine 跨站脚本漏洞 | |
| CVE-2018-0328 | Cisco Unified Communications Manager和Cisco Unified Presence 输入验证漏洞 |
Showing top 20 of 41 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2018-10729
No comments yet