Skip to content

Known vulnerabilities in Phoenix Contact FL SWITCH TSN 2316

Is your version affected?

CVE Summary Score Published
CVE-2026-22323 A CSRF vulnerability in the Link Aggregation configuration interface allows an unauthenticated remote attacker to… 7.1 High Mar 18, 2026
CVE-2026-22322 A stored cross‑site scripting (XSS) vulnerability in the Link Aggregation configuration interface allows an… 7.1 High Mar 18, 2026
CVE-2026-22321 A stack-based buffer overflow in the device's Telnet/SSH CLI login routine occurs when a unauthenticated attacker send… 5.3 Medium Mar 18, 2026
CVE-2026-22320 A stack-based buffer overflow in the CLI's TFTP file‑transfer command handling allows a low-privileged attacker with… 6.5 Medium Mar 18, 2026
CVE-2026-22319 A stack-based buffer overflow in the device's file installation workflow allows a high-privileged attacker to send… 4.9 Medium Mar 18, 2026
CVE-2026-22318 A stack-based buffer overflow vulnerability in the device's file transfer parameter workflow allows a high-privileged… 4.9 Medium Mar 18, 2026
CVE-2026-22317 A command injection vulnerability in the device’s Root CA certificate transfer workflow allows a high-privileged… 7.2 High Mar 18, 2026
CVE-2026-22316 A remote attacker with user privileges for the webUI can use the setting of the TFTP Filename with a POST Request to… 6.5 Medium Mar 18, 2026

Other Phoenix Contact products