CVE:CVE-2018-13990
CNNVD:CNNVD-201901-891
Phoenix Contact FL SWITCH是德国菲尼克斯电气（Phoenix Contact）公司的一款工业级以太网交换机。
Phoenix Contact FL SWITCH 3xxx 1.35之前版本、4xxx 1.35之前版本和48xx 1.35之前版本中存在安全漏洞，该漏洞源于程序没有正确地限制身份验证请求的次数。攻击者可通过实施暴力破解攻击利用该漏洞获取用户名和密码，进而获取访问权限。
solution:Upgrade phoenixcontact fl_switch_3005_firmware to a higher version than 1.35,and avoid the version (,1.35); Upgrade phoenixcontact fl_switch_3005t_firmware to a higher version than 1.35,and avoid the version (,1.35); Upgrade phoenixcontact fl_switch_3004t-fx_firmware to a higher version than 1.35,and avoid the version (,1.35); Upgrade phoenixcontact fl_switch_3004t-fx_st_firmware to a higher version than 1.35,and avoid the version (,1.35); Upgrade phoenixcontact fl_switch_3008_firmware to a higher version than 1.35,and avoid the version (,1.35); Upgrade phoenixcontact fl_switch_3008t_firmware to a higher version than 1.35,and avoid the version (,1.35); Upgrade phoenixcontact fl_switch_3006t-2fx_firmware to a higher version than 1.35,and avoid the version (,1.35); Upgrade phoenixcontact fl_switch_3006t-2fx_st_firmware to a higher version than 1.35,and avoid the version (,1.35); Upgrade phoenixcontact fl_switch_3012e-2sfx_firmware to a higher version than 1.35,and avoid the version (,1.35); Upgrade phoenixcontact fl_switch_3016e_firmware to a higher version than 1.35,and avoid the version (,1.35); Upgrade phoenixcontact fl_switch_3016_firmware to a higher version than 1.35,and avoid the version (,1.35); Upgrade phoenixcontact fl_switch_3016t_firmware to a higher version than 1.35,and avoid the version (,1.35); Upgrade phoenixcontact fl_switch_3006t-2fx_sm_firmware to a higher version than 1.35,and avoid the version (,1.35); Upgrade phoenixcontact fl_switch_4008t-2sfp_firmware to a higher version than 1.35,and avoid the version (,1.35); Upgrade phoenixcontact fl_switch_4008t-2gt-4fx_sm_firmware to a higher version than 1.35,and avoid the version (,1.35); Upgrade phoenixcontact fl_switch_4008t-2gt-3fx_sm_firmware to a higher version than 1.35,and avoid the version (,1.35); Upgrade phoenixcontact fl_switch_4808e-16fx_lc-4gc_firmware to a higher version than 1.35,and avoid the version (,1.35); Upgrade phoenixcontact fl_switch_4808e-16fx_sm-4gc_firmware to a higher version than 1.35,and avoid the version (,1.35); Upgrade phoenixcontact fl_switch_4808e-16fx_sm_st-4gc_firmware to a higher version than 1.35,and avoid the version (,1.35); Upgrade phoenixcontact fl_switch_4808e-16fx_st-4gc_firmware to a higher version than 1.35,and avoid the version (,1.35); Upgrade phoenixcontact fl_switch_4808e-16fx-4gc_firmware to a higher version than 1.35,and avoid the version (,1.35); Upgrade phoenixcontact fl_switch_4808e-16fx_sm_lc-4gc_firmware to a higher version than 1.35,and avoid the version (,1.35); Upgrade phoenixcontact fl_switch_4012t_2gt_2fx_firmware to a higher version than 1.35,and avoid the version (,1.35); Upgrade phoenixcontact fl_switch_4012t-2gt-2fx_st_firmware to a higher version than 1.35,and avoid the version (,1.35); Upgrade phoenixcontact fl_switch_4824e-4gc_firmware to a higher version than 1.35,and avoid the version (,1.35); Upgrade phoenixcontact fl_switch_4800e-24fx-4gc_firmware to a higher version than 1.35,and avoid the version (,1.35); Upgrade phoenixcontact fl_switch_4800e-24fx_sm-4gc_firmware to a higher version than 1.35,and avoid the version (,1.35); Upgrade phoenixcontact fl_switch_3012e-2fx_sm_firmware to a higher version than 1.35,and avoid the version (,1.35); Upgrade phoenixcontact fl_switch_4000t-8poe-2sfp-r_firmware to a higher version than 1.35,and avoid the version (,1.35)