Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2021-34570

Phoenix Contact: DoS for PLCnext Control devices in versions prior to 2021.0.5 LTS

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

Multiple Phoenix Contact PLCnext control devices in versions prior to 2021.0.5 LTS are prone to a DoS attack through special crafted JSON requests.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Phoenix Contact AXC F

  • AXC F 1152 (1151412) to < 2021.0.5 LTSaffected
  • AXC F 2152 (2404267) to < 2021.0.5 LTSaffected
  • AXC F 3152 (1069208) to < 2021.0.5 LTSaffected
  • AXC F 2152 Starterkit (1046568) to < 2021.0.5 LTSaffected

Phoenix Contact RFC

  • RFC 4072S (1051328) to < 2021.0.5 LTSaffected

Phoenix Contact PLCnext

  • PLCnext Technology Starterkit (1188165) to < 2021.0.5 LTSaffected

References