VULNERABILITY INTELLIGENCE

CVE-2018-10731

CVSS score9 CRITICAL

EPSS probability2.65%

CISA KEVNot currently listed

Published2018-05-17

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Description

All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to buffer overflows when handling very large cookies (a different vulnerability than CVE-2018-10728).

Weakness classification

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Primary references

cve@mitre.org — Third Party Advisory, VDB Entry
cve@mitre.org — Patch, Third Party Advisory
cve@mitre.org — Patch, Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory, US Government Resource