{"id":"CVE-2022-22509","aliases":["EUVD-2022-27655","GHSA-rh2h-p77p-xw9h"],"status":"published","title":"PHOENIX CONTACT: FL SWITCH 2xxx series incorrect privilege assignment","description":"In Phoenix Contact FL SWITCH Series 2xxx in version 3.00 an incorrect privilege assignment allows an low privileged user to enable full access to the device configuration.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.0099,"percentile":0.62805,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-269"],"published":"2022-02-02T12:26:12Z","modified":"2026-06-17T04:28:29Z","products":[{"vendor":"phoenixcontact","product":"fl_switch_2005_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2008_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2008f_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2016_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2105_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2108_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2116_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2204-2tc-2sfx_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2205_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2206-2fx_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2206-2fx_sm_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2206-2fx_sm_st_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2206-2fx_st_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2206-2sfx_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2206-2sfx_pn_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2206c-2fx_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2207-fx_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2207-fx_sm_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2208_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2208_pn_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2208c_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2212-2tc-2sfx_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2214-2fx_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2214-2fx_sm_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2214-2sfx_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2214-2sfx_pn_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2216_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2216_pn_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2304-2gc-2sfp_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2306-2sfp_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2306-2sfp_pn_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2308_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2308_pn_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2312-2gc-2sfp_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2314-2sfp_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2314-2sfp_pn_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2316\\/k1_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2316_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2316_pn_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2404-2tc-2sfx_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2406-2sfx_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2406-2sfx_pn_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2408_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2408_pn_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2412-2tc-2sfx_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2414-2sfx_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2414-2sfx_pn_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2416_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2416_pn_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2504-2gc-2sfp_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2506-2sfp\\/k1_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2506-2sfp_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2506-2sfp_pn_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2508\\/k1_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2508_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2508_pn_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2512-2gc-2sfp_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2514-2sfp_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2514-2sfp_pn_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2516_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2516_pn_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2608_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2608_pn_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2708_firmware"},{"vendor":"phoenixcontact","product":"fl_switch_2708_pn_firmware"}],"references":[{"url":"https://cert.vde.com/en/advisories/VDE-2022-001/","tags":["x_refsource_CONFIRM","x_transferred","Mitigation","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-22509"},{"url":"https://github.com/advisories/GHSA-rh2h-p77p-xw9h"}],"sources":{"cve":[{"id":"CVE-2022-22509","title":"PHOENIX CONTACT: FL SWITCH 2xxx series incorrect privilege assignment","description":"In Phoenix Contact FL SWITCH Series 2xxx in version 3.00 an incorrect privilege assignment allows an low privileged user to enable full access to the device configuration.","status":"published","published":"2022-02-02T12:26:12.582Z","modified":"2024-09-17T01:31:08.892Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"updated_at":"2026-11-02T14:34:26.645563Z"}],"euvd":[{"id":"EUVD-2022-27655","description":"In Phoenix Contact FL SWITCH Series 2xxx in version 3.00 an incorrect privilege assignment allows an low privileged user to enable full access to the device configuration.","status":"published","published":"2022-02-02T12:26:12Z","modified":"2024-09-17T01:31:08Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:28:48.901339Z"}],"ghsa":[{"id":"GHSA-rh2h-p77p-xw9h","title":"In Phoenix Contact FL SWITCH Series 2xxx in version 3.00 an incorrect privilege assignment allows...","description":"In Phoenix Contact FL SWITCH Series 2xxx in version 3.00 an incorrect privilege assignment allows an low privileged user to enable full access to the device configuration.","status":"published","published":"2022-02-03T00:00:18Z","modified":"2023-02-03T05:05:28Z","cwes":["CWE-269"],"updated_at":"2026-11-02T14:53:44.871531Z"}],"nvd":[{"id":"CVE-2022-22509","description":"In Phoenix Contact FL SWITCH Series 2xxx in version 3.00 an incorrect privilege assignment allows an low privileged user to enable full access to the device configuration.","status":"published","published":"2022-02-02T13:15:08.407Z","modified":"2026-06-17T04:28:29.64Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":9,"vector":"AV:N/AC:L/Au:S/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:07:11.52734Z"}]}}