CVE-2026-22320 | Phoenix Contact FL SWITCH 2005 up to 3.52 Telnet/SSH stack-based overflow (VDE-2025-104 / EUVD-2026-12789)

VDB-351505 · CVE-2026-22320 · VDE-2025-104 PHOENIX CONTACT FL SWITCH 2005 UP TO 3.52 TELNET/SSH STACK-BASED OVERFLOW HISTORYDIFFRELATEJSONXMLCTI CVSS Meta Temp Score Current Exploit Price (≈) CTI Interest Score 6.3 $0-$5k 0.42 Summaryinfo A vulnerability was found in Phoenix Contact FL SWITCH 2005, FL SWITCH 2008, FL SWITCH 2016, FL SWITCH 2105, FL SWITCH 2108, FL SWITCH 2116, FL SWITCH 2204-2TC-2SFX, FL SWITCH 2205, FL SWITCH 2206-2FX, FL SWITCH 2206-2FX SM, FL SWITCH 2206-2FX SM ST, FL SWITCH 2206-2FX ST, FL SWITCH 2206-2SFX, FL SWITCH 2206-2SFX PN, FL SWITCH 2206C-2FX, FL SWITCH 2207-FX, FL SWITCH 2207-FX SM, FL SWITCH 2208, FL SWITCH 2208 PN, FL SWITCH 2208C, FL SWITCH 2212-2TC-2SFX, FL SWITCH 2214-2FX, FL SWITCH 2214-2FX SM, FL SWITCH 2214-2SFX, FL SWITCH 2214-2SFX PN, FL SWITCH 2216, FL SWITCH 2216 PN, FL SWITCH 2304-2GC-2SFP, FL SWITCH 2306-2SFP, FL SWITCH 2306-2SFP PN, FL SWITCH 2308, FL SWITCH 2308 PN, FL SWITCH 2312-2GC-2SFP, FL SWITCH 2314-2SFP, FL SWITCH 2314-2SFP PN, FL SWITCH 2316, FL SWITCH 2316 PN, FL SWITCH 2404-2TC-2SFX, FL SWITCH 2406-2SFX, FL SWITCH 2406-2SFX PN, FL SWITCH 2408, FL SWITCH 2408 PN, FL SWITCH 2412-2TC-2SFX, FL SWITCH 2414-2SFX, FL SWITCH 2414-2SFX PN, FL SWITCH 2416, FL SWITCH 2416 PN, FL SWITCH 2504-2GC-2SFP, FL SWITCH 2506-2SFP, FL SWITCH 2506-2SFP PN, FL SWITCH 2508, FL SWITCH 2508 PN, FL SWITCH 2512-2GC-2SFP, FL SWITCH 2514-2SFP, FL SWITCH 2514-2SFP PN, FL SWITCH 2516, FL SWITCH 2516 PN, FL SWITCH 2608, FL SWITCH 2608 PN, FL SWITCH 2708, FL SWITCH 2708 PN, FL SWITCH 2303-8SP1, FL NAT 2008, FL NAT 2208, FL NAT 2304-2GC-2SFP, FL SWITCH 2008F, K1, FL SWITCH TSN 2316, FL SWITCH TSN 2312-2GC-2SFP, FL SWITCH TSN 2314-2SFP, FL SWITCH 5924-4GC, FL SWITCH 5916-8GC-4SFP+, FL SWITCH 5924SFP-4GC, FL SWITCH 5924-4SFP+ and FL SWITCH 5916SFP-8GC-4SFP+ up to 3.52. It has been rated as critical. Affected by this vulnerability is an unknown functionality of the component Telnet/SSH. This manipulation causes stack-based overflow. This vulnerability is registered as CVE-2026-22320. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is advised. Detailsinfo A vulnerability classified as critical was found in Phoenix Contact FL SWITCH 2005, FL SWITCH 2008, FL SWITCH 2016, FL SWITCH 2105, FL SWITCH 2108, FL SWITCH 2116, FL SWITCH 2204-2TC-2SFX, FL SWITCH 2205, FL SWITCH 2206-2FX, FL SWITCH 2206-2FX SM, FL SWITCH 2206-2FX SM ST, FL SWITCH 2206-2FX ST, FL SWITCH 2206-2SFX, FL SWITCH 2206-2SFX PN, FL SWITCH 2206C-2FX, FL SWITCH 2207-FX, FL SWITCH 2207-FX SM, FL SWITCH 2208, FL SWITCH 2208 PN, FL SWITCH 2208C, FL SWITCH 2212-2TC-2SFX, FL SWITCH 2214-2FX, FL SWITCH 2214-2FX SM, FL SWITCH 2214-2SFX, FL SWITCH 2214-2SFX PN, FL SWITCH 2216, FL SWITCH 2216 PN, FL SWITCH 2304-2GC-2SFP, FL SWITCH 2306-2SFP, FL SWITCH 2306-2SFP PN, FL SWITCH 2308, FL SWITCH 2308 PN, FL SWITCH 2312-2GC-2SFP, FL SWITCH 2314-2SFP, FL SWITCH 2314-2SFP PN, FL SWITCH 2316, FL SWITCH 2316 PN, FL SWITCH 2404-2TC-2SFX, FL SWITCH 2406-2SFX, FL SWITCH 2406-2SFX PN, FL SWITCH 2408, FL SWITCH 2408 PN, FL SWITCH 2412-2TC-2SFX, FL SWITCH 2414-2SFX, FL SWITCH 2414-2SFX PN, FL SWITCH 2416, FL SWITCH 2416 PN, FL SWITCH 2504-2GC-2SFP, FL SWITCH 2506-2SFP, FL SWITCH 2506-2SFP PN, FL SWITCH 2508, FL SWITCH 2508 PN, FL SWITCH 2512-2GC-2SFP, FL SWITCH 2514-2SFP, FL SWITCH 2514-2SFP PN, FL SWITCH 2516, FL SWITCH 2516 PN, FL SWITCH 2608, FL SWITCH 2608 PN, FL SWITCH 2708, FL SWITCH 2708 PN, FL SWITCH 2303-8SP1, FL NAT 2008, FL NAT 2208, FL NAT 2304-2GC-2SFP, FL SWITCH 2008F, K1, FL SWITCH TSN 2316, FL SWITCH TSN 2312-2GC-2SFP, FL SWITCH TSN 2314-2SFP, FL SWITCH 5924-4GC, FL SWITCH 5916-8GC-4SFP+, FL SWITCH 5924SFP-4GC, FL SWITCH 5924-4SFP+ and FL SWITCH 5916SFP-8GC-4SFP+ up to 3.52. Affected by this vulnerability is an unknown function of the component Telnet/SSH. The manipulation with an unknown input leads to a stack-based overflow vulnerability. The CWE definition for the vulnerability is CWE-121. A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function). As an impact it is known to affect availability. The summary by CVE is: A stack-based buffer overflow in the CLI's TFTP file‑transfer command handling allows a low-privileged attacker with Telnet/SSH access to trigger memory corruption by supplying unexpected or oversized filename input. Exploitation results in the corruption of the internal buffer, causing the CLI and web dashboard to become unavailable and leading to a denial of service. The weakness was published by Gabriele Quagliarella as VDE-2025-104. The advisory is shared at certvde.com. This vulnerability is known as CVE-2026-22320 since 01/07/2026. The exploitation appears to be easy. The attack can be launched remotely. Neither technical details nor an exploit are publicly available. The price for an exploit might be around USD $0-$5k at the moment (estimation calculated on 03/18/2026). Upgrading to version 3.53 eliminates this vulnerability. The vulnerability is also documented in the databases at EUVD (EUVD-2026-12789) and CERT Bund (WID-SEC-2026-0765). Affected Phoenix Contact FL SWITCH Productinfo Vendor Phoenix Contact Name FL NAT 2008 FL NAT 2208 FL NAT 2304-2GC-2SFP FL SWITCH 2005 FL SWITCH 2008 FL SWITCH 2008F FL SWITCH 2016 FL SWITCH 2105 FL SWITCH 2108 FL SWITCH 2116 FL SWITCH 2204-2TC-2SFX FL SWITCH 2205 FL SWITCH 2206-2FX FL SWITCH 2206-2FX SM FL SWITCH 2206-2FX SM ST FL SWITCH 2206-2FX ST FL SWITCH 2206-2SFX FL SWITCH 2206-2SFX PN FL SWITCH 2206C-2FX FL SWITCH 2207-FX FL SWITCH 2207-FX SM FL SWITCH 2208 FL SWITCH 2208 PN FL SWITCH 2208C FL SWITCH 2212-2TC-2SFX FL SWITCH 2214-2FX FL SWITCH 2214-2FX SM FL SWITCH 2214-2SFX FL SWITCH 2214-2SFX PN FL SWITCH 2216 FL SWITCH 2216 PN FL SWITCH 2303-8SP1 FL SWITCH 2304-2GC-2SFP FL SWITCH 2306-2SFP FL SWITCH 2306-2SFP PN FL SWITCH 2308 FL SWITCH 2308 PN FL SWITCH 2312-2GC-2SFP FL SWITCH 2314-2SFP FL SWITCH 2314-2SFP PN FL SWITCH 2316 FL SWITCH 2316 PN FL SWITCH 2404-2TC-2SFX FL SWITCH 2406-2SFX FL SWITCH 2406-2SFX PN FL SWITCH 2408 FL SWITCH 2408 PN FL SWITCH 2412-2TC-2SFX FL SWITCH 2414-2SFX FL SWITCH 2414-2SFX PN FL SWITCH 2416 FL SWITCH 2416 PN FL SWITCH 2504-2GC-2SFP FL SWITCH 2506-2SFP FL SWITCH 2506-2SFP PN FL SWITCH 2508 FL SWITCH 2508 PN FL SWITCH 2512-2GC-2SFP FL SWITCH 2514-2SFP FL SWITCH 2514-2SFP PN FL SWITCH 2516 FL SWITCH 2516 PN FL SWITCH 2608 FL SWITCH 2608 PN FL SWITCH 2708 FL SWITCH 2708 PN FL SWITCH 5916-8GC-4SFP+ FL SWITCH 5916SFP-8GC-4SFP+ FL SWITCH 5924-4GC FL SWITCH 5924-4SFP+ FL SWITCH 5924SFP-4GC FL SWITCH TSN 2312-2GC-2SFP FL SWITCH TSN 2314-2SFP FL SWITCH TSN 2316 K1 Version 3.0 3.1 3.2 3.3 3.4 3.5 3.6 3.7 3.8 3.9 3.10 3.11 3.12 3.13 3.14 3.15 3.16 3.17 3.18 3.19 3.20 3.21 3.22 3.23 3.24 3.25 3.26 3.27 3.28 3.29 3.30 3.31 3.32 3.33 3.34 3.35 3.36 3.37 3.38 3.39 3.40 3.41 3.42 3.43 3.44 3.45 3.46 3.47 3.48 3.49 3.50 3.51 3.52 License commercial CPE 2.3info 🔒 🔒 🔒 CPE 2.2info 🔒 🔒 🔒 CVSSv4info VulDB Vector: 🔒 VulDB Reliability: 🔍 CVSSv3info VulDB Meta Base Score: 6.5 VulDB Meta Temp Score: 6.3 VulDB Base Score: 6.5 VulDB Temp Score: 6.2 VulDB Vector: 🔒 VulDB Reliability: 🔍 CNA Base Score: 6.5 CNA Vector (CERTVDE): 🔒 CVSSv2info Vector Complexity Authentication Confidentiality Integrity Availability Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock VulDB Base Score: 🔒 VulDB Temp Score: 🔒 VulDB Reliability: 🔍 Exploitinginfo Class: Stack-based overflow CWE: CWE-121 / CWE-119 CAPEC: 🔒 ATT&CK: 🔒 Physical: No Local: No Remote: Yes Availability: 🔒 Status: Not defined Price Prediction: 🔍 Current Price Estimation: 🔒 0-Day Unlock Unlock Unlock Unlock Today Unlock Unlock Unlock Unlock Threat Intelligenceinfo Interest: 🔍 Active Actors: 🔍 Active APT Groups: 🔍 Countermeasuresinfo Recommended: Upgrade Status: 🔍 0-Day Time: 🔒 Upgrade: FL SWITCH 2005/FL SWITCH 2008/FL SWITCH 2016/FL SWITCH 2105/FL SWITCH 2108/FL SWITCH 2116/FL SWITCH 2204-2TC-2SFX/FL SWITCH 2205/FL SWITCH 2206-2FX/FL SWITCH 2206-2FX SM/FL SWITCH 2206-2FX SM ST/FL SWITCH 2206-2FX ST/FL SWITCH 2206-2SFX/FL SWITCH 2206-2SFX PN/FL SWITCH 2206C-2FX/FL SWITCH 2207-FX/FL SWITCH 2207-FX SM/FL SWITCH 2208/FL SWITCH 2208 PN/FL SWITCH 2208C/FL SWITCH 2212-2TC-2SFX/FL SWITCH 2214-2FX/FL SWITCH 2214-2FX SM/FL SWITCH 2214-2SFX/FL SWITCH 2214-2SFX PN/FL SWITCH 2216/FL SWITCH 2216 PN/FL SWITCH 2304-2GC-2SFP/FL SWITCH 2306-2SFP/FL SWITCH 2306-2SFP PN/FL SWITCH 2308/FL SWITCH 2308 PN/FL SWITCH 2312-2GC-2SFP/FL SWITCH 2314-2SFP/FL SWITCH 2314-2SFP PN/FL SWITCH 2316/FL SWITCH 2316 PN/FL SWITCH 2404-2TC-2SFX/FL SWITCH 2406-2SFX/FL SWITCH 2406-2SFX PN/FL SWITCH 2408/FL SWITCH 2408 PN/FL SWITCH 2412-2TC-2SFX/FL SWITCH 2414-2SFX/FL SWITCH 2414-2SFX PN/FL SWITCH 2416/FL SWITCH 2416 PN/FL SWITCH 2504-2GC-2SFP/FL SWITCH 2506-2SFP/FL SWITCH 2506-2SFP PN/FL SWITCH 2508/FL SWITCH 2508 PN/FL SWITCH 2512-2GC-2SFP/FL SWITCH 2514-2SFP/FL SWITCH 2514-2SFP PN/FL SWITCH 2516/FL SWITCH 2516 PN/FL SWITCH 2608/FL SWITCH 2608 PN/FL SWITCH 2708/FL SWITCH 2708 PN/FL SWITCH 2303-8SP1/FL NAT 2008/FL NAT 2208/FL NAT 2304-2GC-2SFP/FL SWITCH 2008F/K1/FL SWITCH TSN 2316/FL SWITCH TSN 2312-2GC-2SFP/FL SWITCH TSN 2314-2SFP/FL SWITCH 5924-4GC/FL SWITCH 5916-8GC-4SFP+/FL SWITCH 5924SFP-4GC/FL SWITCH 5924-4SFP+/FL SWITCH 5916SFP-8GC-4SFP+ 3.53 Timelineinfo 01/07/2026 CVE reserved 03/18/2026 +70 days Advisory disclosed 03/18/2026 +0 days VulDB entry created 03/18/2026 +0 days VulDB entry last update Sourcesinfo Advisory: VDE-2025-104 Researcher: Gabriele Quagliarella Status: Confirmed CVE: CVE-2026-22320 (🔒) GCVE (CVE): GCVE-0-2026-22320 GCVE (VulDB): GCVE-100-351505 EUVD: 🔒 CERT Bund: WID-SEC-2026-0765 - Phoenix Contact FL SWITCH: Mehrere Schwachstellen Entryinfo Created: 03/18/2026 09:17 Updated: 03/18/2026 12:36 Changes: 03/18/2026 09:17 (66), 03/18/2026 10:46 (1), 03/18/2026 12:36 (7) Complete: 🔍 Cache ID: 99:8A4:101 Discussion No comments yet. Languages: en. Please log in to comment. ◂ PreviousOverviewNext ▸