CVE-2026-22323 Cross‑Site Request Forgery in Link Aggregation Configuration
A CSRF vulnerability in the Link Aggregation configuration interface allows an unauthenticated remote attacker to trick authenticated users into sending unauthorized POST requests to the device by luring them to a malicious webpage. This can silently alter the device’s configuration without the victim’s knowledge or consent. Availability impact was set to low because after a successful attack the device will automatically recover without external intervention.
Problem types: cwe_id: CWE-352
description: CWE-352 Cross-Site Request Forgery (CSRF)
Affected products: vendor: Phoenix Contact
product: FL SWITCH 2005
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2008
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2016
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2105
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2108
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2116
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2204-2TC-2SFX
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2205
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2206-2FX
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2206-2FX SM
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2206-2FX SM ST
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2206-2FX ST
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2206-2SFX
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2206-2SFX PN
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2206C-2FX
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2207-FX
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2207-FX SM
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2208
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2208 PN
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2208C
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2212-2TC-2SFX
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2214-2FX
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2214-2FX SM
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2214-2SFX
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2214-2SFX PN
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2216
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2216 PN
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2304-2GC-2SFP
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2306-2SFP
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2306-2SFP PN
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2308
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2308 PN
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2312-2GC-2SFP
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2314-2SFP
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2314-2SFP PN
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2316
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2316 PN
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2404-2TC-2SFX
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2406-2SFX
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2406-2SFX PN
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2408
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2408 PN
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2412-2TC-2SFX
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2414-2SFX
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2414-2SFX PN
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2416
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2416 PN
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2504-2GC-2SFP
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2506-2SFP
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2506-2SFP PN
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2508
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2508 PN
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2512-2GC-2SFP
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2514-2SFP
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2514-2SFP PN
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2516
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2516 PN
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2608
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2608 PN
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2708
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2708 PN
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2303-8SP1
default_status: unaffected
vendor: Phoenix Contact
product: FL NAT 2008
default_status: unaffected
vendor: Phoenix Contact
product: FL NAT 2208
default_status: unaffected
vendor: Phoenix Contact
product: FL NAT 2304-2GC-2SFP
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2008F
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2316/K1
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2506-2SFP/K1
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 2508/K1
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH TSN 2316
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH TSN 2312-2GC-2SFP
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH TSN 2314-2SFP
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 5924-4GC
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 5916-8GC-4SFP+
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 5924SFP-4GC
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 5924-4SFP+
default_status: unaffected
vendor: Phoenix Contact
product: FL SWITCH 5916SFP-8GC-4SFP+
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 7.1
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L
version: 3.1
Credits: lang: en
value: Gabriele Quagliarella from Nozomi Networks
Published: 2026-03-18T07:35:09.084Z