7.8

CVE-2021-34570

Phoenix Contact: DoS for PLCnext Control devices in versions prior to 2021.0.5 LTS

Multiple Phoenix Contact PLCnext control devices in versions prior to 2021.0.5 LTS are prone to a DoS attack through special crafted JSON requests.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Phoenixcontact ≫ Axc F 2152 Starterkit Firmware SwEdition lts Version < 2021.0.5
Phoenixcontact ≫ Rfc 4072s Firmware SwEdition lts Version < 2021.0.5
   Phoenixcontact ≫ Rfc 4072s Version -
Phoenixcontact ≫ Axc F 3152 Firmware SwEdition lts Version < 2021.0.5
   Phoenixcontact ≫ Axc F 3152 Version -
Phoenixcontact ≫ Axc F 1152 Firmware SwEdition lts Version < 2021.0.5
   Phoenixcontact ≫ Axc F 1152 Version -
Phoenixcontact ≫ Axc F 2152 Firmware SwEdition lts Version < 2021.0.5
   Phoenixcontact ≫ Axc F 2152 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.98% 0.583
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST 7.8 10 6.9
AV:N/AC:L/Au:N/C:N/I:N/A:C
info@cert.vde.com 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://cert.vde.com/en/advisories/VDE-2021-029/
Patch
Third Party Advisory