HIGH🇬🇧 English

CVE-2021-34570

CVSS 7.5v3.1pub. 2021-09-27upd. 2024-11-21

Multiple Phoenix Contact PLCnext control devices in versions prior to 2021.0.5 LTS are prone to a DoS attack through special crafted JSON requests.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

  • Phoenixcontact Axc F 1152

    HW
    Phoenixcontact
    wszystkie wersje

  • Phoenixcontact Axc F 1152 Firmware

    OS
    Phoenixcontact
    < 2021.0.5

  • Phoenixcontact Axc F 2152

    HW
    Phoenixcontact
    wszystkie wersje

  • Phoenixcontact Axc F 2152 Firmware

    OS
    Phoenixcontact
    < 2021.0.5

  • Phoenixcontact Axc F 2152 Starterkit

    HW
    Phoenixcontact
    wszystkie wersje

  • Phoenixcontact Axc F 2152 Starterkit Firmware

    OS
    Phoenixcontact
    < 2021.0.5

  • Phoenixcontact Axc F 3152

    HW
    Phoenixcontact
    wszystkie wersje

  • Phoenixcontact Axc F 3152 Firmware

    OS
    Phoenixcontact
    < 2021.0.5

  • Phoenixcontact Plcnext Technology Starterkit

    HW
    Phoenixcontact
    wszystkie wersje

  • Phoenixcontact Plcnext Technology Starterkit Firmware

    OS
    Phoenixcontact
    < 2021.0.5

  • Phoenixcontact Rfc 4072s

    HW
    Phoenixcontact
    wszystkie wersje

  • Phoenixcontact Rfc 4072s Firmware

    OS
    Phoenixcontact
    < 2021.0.5
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2023-46142HIGH8.8ten sam produkt

A incorrect permission assignment for critical resource vulnerability in PLCnext products allows an remote att...

CVE-2020-12519HIGH8.8ten sam produkt

On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an attacker can use this vulnerability i...

CVE-2020-12517HIGH8.8ten sam produkt

On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an authenticated low privileged user cou...

CVE-2023-46144MEDIUM6.5ten sam produkt

A download of code without integrity check vulnerability in PLCnext products allows an remote attacker with lo...

CVE-2020-12518MEDIUM5.5ten sam produkt

On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an attacker can use the knowledge gained...