CVE-2018-13993: The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 is prone to CSRF.

Security readout for executives and security teams

PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, and 48xx WebUI firmware versions 1.0 through 1.34 are vulnerable to cross-site request forgery. A tricked administrator could unintentionally cause harmful WebUI actions. The score is high because successful misuse could affect availability, confidentiality, and integrity. Exposure is most likely where affected FL SWITCH WebUI management interfaces are reachable by administrators from general user workstations, corporate networks, or remote access paths. The bundle does not provide CPEs or a complete product inventory mapping. Treat this as a high-priority operational technology management-plane issue. Prioritize asset identification and vendor-guided remediation, especially for switches supporting production networks or reachable from less-trusted networks. Mitigation focus: Identify FL SWITCH 3xxx, 4xxx, and 48xx devices and record firmware versions.; Check PHOENIX CONTACT and CISA guidance for fixed firmware or vendor-recommended mitigations.; Restrict WebUI access to trusted administration networks only..

Prepared

May 23, 2026, 08:01 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.