CVE-2018-10728: All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are pr...

Security readout for executives and security teams

Phoenix Contact managed FL SWITCH 3xxx, 4xxx, and 48xx switches with firmware 1.0 through 1.33 have reported buffer overflow vulnerabilities. These are operational technology network devices, so exposure may matter most in industrial or facility networks. The provided sources do not include CVSS details or confirmed active exploitation. Organizations using Phoenix Contact managed FL SWITCH 3xxx, 4xxx, or 48xx devices may be exposed if firmware is 1.0 through 1.33. Exposure depends on whether affected devices are present and reachable within OT, plant, facility, or network management environments. Treat this as an OT asset exposure question first. Prioritize environments where these switches support production, safety, or facility operations, especially if affected firmware is found. Urgency is harder to rank because the provided sources lack severity and exploitation evidence. Mitigation focus: Inventory Phoenix Contact FL SWITCH 3xxx, 4xxx, and 48xx devices.; Check firmware versions for the affected 1.0 through 1.33 range.; Review Phoenix Contact, VDE, and CISA advisory guidance before applying fixes..

Prepared

Jun 7, 2026, 13:21 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.