MEDIUM🇬🇧 English

CVE-2020-12521

CVSS 6.5v3.1pub. 2020-12-17upd. 2024-11-21

On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS a specially crafted LLDP packet may lead to a high system load in the PROFINET stack. An attacker can cause failure of system services or a complete reboot.

oryginał EN
CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

  • Phoenixcontact Axc F 1152

    HW
    Phoenixcontact
    wszystkie wersje

  • Phoenixcontact Axc F 2152

    HW
    Phoenixcontact
    wszystkie wersje

  • Phoenixcontact Axc F 2152 Starterkit

    HW
    Phoenixcontact
    wszystkie wersje

  • Phoenixcontact Axc F 3152

    HW
    Phoenixcontact
    wszystkie wersje

  • Phoenixcontact Plcnext Firmware

    OS
    Phoenixcontact
    < 2021.0

  • Phoenixcontact Plcnext Technology Starterkit

    HW
    Phoenixcontact
    wszystkie wersje

  • Phoenixcontact Rfc 4072s

    HW
    Phoenixcontact
    wszystkie wersje
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2023-46142HIGH8.8ten sam produkt

A incorrect permission assignment for critical resource vulnerability in PLCnext products allows an remote att...

CVE-2021-34570HIGH7.5ten sam produkt

Multiple Phoenix Contact PLCnext control devices in versions prior to 2021.0.5 LTS are prone to a DoS attack t...

CVE-2020-12519HIGH8.8ten sam produkt

On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an attacker can use this vulnerability i...

CVE-2020-12517HIGH8.8ten sam produkt

On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an authenticated low privileged user cou...

CVE-2023-46144MEDIUM6.5ten sam produkt

A download of code without integrity check vulnerability in PLCnext products allows an remote attacker with lo...