6.5

CVE-2020-12521

Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS: A specially crafted LLDP packet may lead to a high system load in the PROFINET stack.

On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS a specially crafted LLDP packet may lead to a high system load in the PROFINET stack. An attacker can cause failure of system services or a complete reboot.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Phoenixcontact ≫ Plcnext Firmware SwEdition long_term_support Version < 2021.0
   Phoenixcontact ≫ Axc F 1152 Version -
Phoenixcontact ≫ Plcnext Firmware SwEdition long_term_support Version < 2021.0
   Phoenixcontact ≫ Axc F 2152 Version -
Phoenixcontact ≫ Plcnext Firmware SwEdition long_term_support Version < 2021.0
   Phoenixcontact ≫ Axc F 3152 Version -
Phoenixcontact ≫ Plcnext Firmware SwEdition long_term_support Version < 2021.0
   Phoenixcontact ≫ Rfc 4072s Version -
Phoenixcontact ≫ Plcnext Firmware SwEdition long_term_support Version < 2021.0
Phoenixcontact ≫ Plcnext Firmware SwEdition long_term_support Version < 2021.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.45% 0.359
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 2.8 3.6
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST 6.1 6.5 6.9
AV:A/AC:L/Au:N/C:N/I:N/A:C
info@cert.vde.com 6.5 2.8 3.6
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://cert.vde.com/en-us/advisories/vde-2020-049
Third Party Advisory