CVE-2026-22317 | Phoenix Contact FL SWITCH 2005 up to 3.52 HTTP command injection (VDE-2025-104 / EUVD-2026-12786)

VDB-351500 · CVE-2026-22317 · VDE-2025-104 PHOENIX CONTACT FL SWITCH 2005 UP TO 3.52 HTTP COMMAND INJECTION HISTORYDIFFRELATEJSONXMLCTI CVSS Meta Temp Score Current Exploit Price (≈) CTI Interest Score 7.1 $0-$5k 0.42 Summaryinfo A vulnerability, which was classified as critical, was found in Phoenix Contact FL SWITCH 2005, FL SWITCH 2008, FL SWITCH 2016, FL SWITCH 2105, FL SWITCH 2108, FL SWITCH 2116, FL SWITCH 2204-2TC-2SFX, FL SWITCH 2205, FL SWITCH 2206-2FX, FL SWITCH 2206-2FX SM, FL SWITCH 2206-2FX SM ST, FL SWITCH 2206-2FX ST, FL SWITCH 2206-2SFX, FL SWITCH 2206-2SFX PN, FL SWITCH 2206C-2FX, FL SWITCH 2207-FX, FL SWITCH 2207-FX SM, FL SWITCH 2208, FL SWITCH 2208 PN, FL SWITCH 2208C, FL SWITCH 2212-2TC-2SFX, FL SWITCH 2214-2FX, FL SWITCH 2214-2FX SM, FL SWITCH 2214-2SFX, FL SWITCH 2214-2SFX PN, FL SWITCH 2216, FL SWITCH 2216 PN, FL SWITCH 2304-2GC-2SFP, FL SWITCH 2306-2SFP, FL SWITCH 2306-2SFP PN, FL SWITCH 2308, FL SWITCH 2308 PN, FL SWITCH 2312-2GC-2SFP, FL SWITCH 2314-2SFP, FL SWITCH 2314-2SFP PN, FL SWITCH 2316, FL SWITCH 2316 PN, FL SWITCH 2404-2TC-2SFX, FL SWITCH 2406-2SFX, FL SWITCH 2406-2SFX PN, FL SWITCH 2408, FL SWITCH 2408 PN, FL SWITCH 2412-2TC-2SFX, FL SWITCH 2414-2SFX, FL SWITCH 2414-2SFX PN, FL SWITCH 2416, FL SWITCH 2416 PN, FL SWITCH 2504-2GC-2SFP, FL SWITCH 2506-2SFP, FL SWITCH 2506-2SFP PN, FL SWITCH 2508, FL SWITCH 2508 PN, FL SWITCH 2512-2GC-2SFP, FL SWITCH 2514-2SFP, FL SWITCH 2514-2SFP PN, FL SWITCH 2516, FL SWITCH 2516 PN, FL SWITCH 2608, FL SWITCH 2608 PN, FL SWITCH 2708, FL SWITCH 2708 PN, FL SWITCH 2303-8SP1, FL NAT 2008, FL NAT 2208, FL NAT 2304-2GC-2SFP, FL SWITCH 2008F, K1, FL SWITCH TSN 2316, FL SWITCH TSN 2312-2GC-2SFP, FL SWITCH TSN 2314-2SFP, FL SWITCH 5924-4GC, FL SWITCH 5916-8GC-4SFP+, FL SWITCH 5924SFP-4GC, FL SWITCH 5924-4SFP+ and FL SWITCH 5916SFP-8GC-4SFP+ up to 3.52. The affected element is an unknown function of the component HTTP Handler. Such manipulation leads to command injection. This vulnerability is referenced as CVE-2026-22317. It is possible to launch the attack remotely. No exploit is available. You should upgrade the affected component. Detailsinfo A vulnerability was found in Phoenix Contact FL SWITCH 2005, FL SWITCH 2008, FL SWITCH 2016, FL SWITCH 2105, FL SWITCH 2108, FL SWITCH 2116, FL SWITCH 2204-2TC-2SFX, FL SWITCH 2205, FL SWITCH 2206-2FX, FL SWITCH 2206-2FX SM, FL SWITCH 2206-2FX SM ST, FL SWITCH 2206-2FX ST, FL SWITCH 2206-2SFX, FL SWITCH 2206-2SFX PN, FL SWITCH 2206C-2FX, FL SWITCH 2207-FX, FL SWITCH 2207-FX SM, FL SWITCH 2208, FL SWITCH 2208 PN, FL SWITCH 2208C, FL SWITCH 2212-2TC-2SFX, FL SWITCH 2214-2FX, FL SWITCH 2214-2FX SM, FL SWITCH 2214-2SFX, FL SWITCH 2214-2SFX PN, FL SWITCH 2216, FL SWITCH 2216 PN, FL SWITCH 2304-2GC-2SFP, FL SWITCH 2306-2SFP, FL SWITCH 2306-2SFP PN, FL SWITCH 2308, FL SWITCH 2308 PN, FL SWITCH 2312-2GC-2SFP, FL SWITCH 2314-2SFP, FL SWITCH 2314-2SFP PN, FL SWITCH 2316, FL SWITCH 2316 PN, FL SWITCH 2404-2TC-2SFX, FL SWITCH 2406-2SFX, FL SWITCH 2406-2SFX PN, FL SWITCH 2408, FL SWITCH 2408 PN, FL SWITCH 2412-2TC-2SFX, FL SWITCH 2414-2SFX, FL SWITCH 2414-2SFX PN, FL SWITCH 2416, FL SWITCH 2416 PN, FL SWITCH 2504-2GC-2SFP, FL SWITCH 2506-2SFP, FL SWITCH 2506-2SFP PN, FL SWITCH 2508, FL SWITCH 2508 PN, FL SWITCH 2512-2GC-2SFP, FL SWITCH 2514-2SFP, FL SWITCH 2514-2SFP PN, FL SWITCH 2516, FL SWITCH 2516 PN, FL SWITCH 2608, FL SWITCH 2608 PN, FL SWITCH 2708, FL SWITCH 2708 PN, FL SWITCH 2303-8SP1, FL NAT 2008, FL NAT 2208, FL NAT 2304-2GC-2SFP, FL SWITCH 2008F, K1, FL SWITCH TSN 2316, FL SWITCH TSN 2312-2GC-2SFP, FL SWITCH TSN 2314-2SFP, FL SWITCH 5924-4GC, FL SWITCH 5916-8GC-4SFP+, FL SWITCH 5924SFP-4GC, FL SWITCH 5924-4SFP+ and FL SWITCH 5916SFP-8GC-4SFP+ up to 3.52 and classified as critical. Affected by this issue is some unknown functionality of the component HTTP Handler. The manipulation with an unknown input leads to a command injection vulnerability. Using CWE to declare the problem leads to CWE-77. The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component. Impacted is confidentiality, integrity, and availability. CVE summarizes: A command injection vulnerability in the device’s Root CA certificate transfer workflow allows a high-privileged attacker to send crafted HTTP POST requests that result in arbitrary command execution on the underlying Linux OS with root privileges. The weakness was published by Gabriele Quagliarella as VDE-2025-104. The advisory is shared for download at certvde.com. This vulnerability is handled as CVE-2026-22317 since 01/07/2026. The exploitation is known to be easy. The attack may be launched remotely. The exploitation requires an enhanced level of successful authentication. There are neither technical details nor an exploit publicly available. The current price for an exploit might be approx. USD $0-$5k (estimation calculated on 03/18/2026). The MITRE ATT&CK project declares the attack technique as T1202. Upgrading to version 3.53 eliminates this vulnerability. The vulnerability is also documented in the databases at EUVD (EUVD-2026-12786) and CERT Bund (WID-SEC-2026-0765). Affected Phoenix Contact FL SWITCH Productinfo Vendor Phoenix Contact Name FL NAT 2008 FL NAT 2208 FL NAT 2304-2GC-2SFP FL SWITCH 2005 FL SWITCH 2008 FL SWITCH 2008F FL SWITCH 2016 FL SWITCH 2105 FL SWITCH 2108 FL SWITCH 2116 FL SWITCH 2204-2TC-2SFX FL SWITCH 2205 FL SWITCH 2206-2FX FL SWITCH 2206-2FX SM FL SWITCH 2206-2FX SM ST FL SWITCH 2206-2FX ST FL SWITCH 2206-2SFX FL SWITCH 2206-2SFX PN FL SWITCH 2206C-2FX FL SWITCH 2207-FX FL SWITCH 2207-FX SM FL SWITCH 2208 FL SWITCH 2208 PN FL SWITCH 2208C FL SWITCH 2212-2TC-2SFX FL SWITCH 2214-2FX FL SWITCH 2214-2FX SM FL SWITCH 2214-2SFX FL SWITCH 2214-2SFX PN FL SWITCH 2216 FL SWITCH 2216 PN FL SWITCH 2303-8SP1 FL SWITCH 2304-2GC-2SFP FL SWITCH 2306-2SFP FL SWITCH 2306-2SFP PN FL SWITCH 2308 FL SWITCH 2308 PN FL SWITCH 2312-2GC-2SFP FL SWITCH 2314-2SFP FL SWITCH 2314-2SFP PN FL SWITCH 2316 FL SWITCH 2316 PN FL SWITCH 2404-2TC-2SFX FL SWITCH 2406-2SFX FL SWITCH 2406-2SFX PN FL SWITCH 2408 FL SWITCH 2408 PN FL SWITCH 2412-2TC-2SFX FL SWITCH 2414-2SFX FL SWITCH 2414-2SFX PN FL SWITCH 2416 FL SWITCH 2416 PN FL SWITCH 2504-2GC-2SFP FL SWITCH 2506-2SFP FL SWITCH 2506-2SFP PN FL SWITCH 2508 FL SWITCH 2508 PN FL SWITCH 2512-2GC-2SFP FL SWITCH 2514-2SFP FL SWITCH 2514-2SFP PN FL SWITCH 2516 FL SWITCH 2516 PN FL SWITCH 2608 FL SWITCH 2608 PN FL SWITCH 2708 FL SWITCH 2708 PN FL SWITCH 5916-8GC-4SFP+ FL SWITCH 5916SFP-8GC-4SFP+ FL SWITCH 5924-4GC FL SWITCH 5924-4SFP+ FL SWITCH 5924SFP-4GC FL SWITCH TSN 2312-2GC-2SFP FL SWITCH TSN 2314-2SFP FL SWITCH TSN 2316 K1 Version 3.0 3.1 3.2 3.3 3.4 3.5 3.6 3.7 3.8 3.9 3.10 3.11 3.12 3.13 3.14 3.15 3.16 3.17 3.18 3.19 3.20 3.21 3.22 3.23 3.24 3.25 3.26 3.27 3.28 3.29 3.30 3.31 3.32 3.33 3.34 3.35 3.36 3.37 3.38 3.39 3.40 3.41 3.42 3.43 3.44 3.45 3.46 3.47 3.48 3.49 3.50 3.51 3.52 License commercial CPE 2.3info 🔒 🔒 🔒 CPE 2.2info 🔒 🔒 🔒 CVSSv4info VulDB Vector: 🔒 VulDB Reliability: 🔍 CVSSv3info VulDB Meta Base Score: 7.2 VulDB Meta Temp Score: 7.1 VulDB Base Score: 7.2 VulDB Temp Score: 6.9 VulDB Vector: 🔒 VulDB Reliability: 🔍 CNA Base Score: 7.2 CNA Vector (CERTVDE): 🔒 CVSSv2info Vector Complexity Authentication Confidentiality Integrity Availability Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock VulDB Base Score: 🔒 VulDB Temp Score: 🔒 VulDB Reliability: 🔍 Exploitinginfo Class: Command injection CWE: CWE-77 / CWE-74 / CWE-707 CAPEC: 🔒 ATT&CK: 🔒 Physical: No Local: No Remote: Yes Availability: 🔒 Status: Not defined Price Prediction: 🔍 Current Price Estimation: 🔒 0-Day Unlock Unlock Unlock Unlock Today Unlock Unlock Unlock Unlock Threat Intelligenceinfo Interest: 🔍 Active Actors: 🔍 Active APT Groups: 🔍 Countermeasuresinfo Recommended: Upgrade Status: 🔍 0-Day Time: 🔒 Upgrade: FL SWITCH 2005/FL SWITCH 2008/FL SWITCH 2016/FL SWITCH 2105/FL SWITCH 2108/FL SWITCH 2116/FL SWITCH 2204-2TC-2SFX/FL SWITCH 2205/FL SWITCH 2206-2FX/FL SWITCH 2206-2FX SM/FL SWITCH 2206-2FX SM ST/FL SWITCH 2206-2FX ST/FL SWITCH 2206-2SFX/FL SWITCH 2206-2SFX PN/FL SWITCH 2206C-2FX/FL SWITCH 2207-FX/FL SWITCH 2207-FX SM/FL SWITCH 2208/FL SWITCH 2208 PN/FL SWITCH 2208C/FL SWITCH 2212-2TC-2SFX/FL SWITCH 2214-2FX/FL SWITCH 2214-2FX SM/FL SWITCH 2214-2SFX/FL SWITCH 2214-2SFX PN/FL SWITCH 2216/FL SWITCH 2216 PN/FL SWITCH 2304-2GC-2SFP/FL SWITCH 2306-2SFP/FL SWITCH 2306-2SFP PN/FL SWITCH 2308/FL SWITCH 2308 PN/FL SWITCH 2312-2GC-2SFP/FL SWITCH 2314-2SFP/FL SWITCH 2314-2SFP PN/FL SWITCH 2316/FL SWITCH 2316 PN/FL SWITCH 2404-2TC-2SFX/FL SWITCH 2406-2SFX/FL SWITCH 2406-2SFX PN/FL SWITCH 2408/FL SWITCH 2408 PN/FL SWITCH 2412-2TC-2SFX/FL SWITCH 2414-2SFX/FL SWITCH 2414-2SFX PN/FL SWITCH 2416/FL SWITCH 2416 PN/FL SWITCH 2504-2GC-2SFP/FL SWITCH 2506-2SFP/FL SWITCH 2506-2SFP PN/FL SWITCH 2508/FL SWITCH 2508 PN/FL SWITCH 2512-2GC-2SFP/FL SWITCH 2514-2SFP/FL SWITCH 2514-2SFP PN/FL SWITCH 2516/FL SWITCH 2516 PN/FL SWITCH 2608/FL SWITCH 2608 PN/FL SWITCH 2708/FL SWITCH 2708 PN/FL SWITCH 2303-8SP1/FL NAT 2008/FL NAT 2208/FL NAT 2304-2GC-2SFP/FL SWITCH 2008F/K1/FL SWITCH TSN 2316/FL SWITCH TSN 2312-2GC-2SFP/FL SWITCH TSN 2314-2SFP/FL SWITCH 5924-4GC/FL SWITCH 5916-8GC-4SFP+/FL SWITCH 5924SFP-4GC/FL SWITCH 5924-4SFP+/FL SWITCH 5916SFP-8GC-4SFP+ 3.53 Timelineinfo 01/07/2026 CVE reserved 03/18/2026 +70 days Advisory disclosed 03/18/2026 +0 days VulDB entry created 03/18/2026 +0 days VulDB entry last update Sourcesinfo Advisory: VDE-2025-104 Researcher: Gabriele Quagliarella Status: Confirmed CVE: CVE-2026-22317 (🔒) GCVE (CVE): GCVE-0-2026-22317 GCVE (VulDB): GCVE-100-351500 EUVD: 🔒 CERT Bund: WID-SEC-2026-0765 - Phoenix Contact FL SWITCH: Mehrere Schwachstellen Entryinfo Created: 03/18/2026 09:14 Updated: 03/18/2026 12:36 Changes: 03/18/2026 09:14 (66), 03/18/2026 11:42 (1), 03/18/2026 12:36 (7) Complete: 🔍 Cache ID: 99:22E:101 Discussion No comments yet. Languages: en. Please log in to comment. ◂ PreviousOverviewNext ▸