CVE-2020-12521
Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS: A specially crafted LLDP packet may lead to a high system load in the PROFINET stack.
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 2021.0 LTS
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS a specially crafted LLDP packet may lead to a high system load in the PROFINET stack. An attacker can cause failure of system services or a complete reboot.
Timeline
- CVE published
- Record last updated
Affected versions
- Phoenix Contact AXC F 1152 (1151412)
fixed in 2021.0 LTS
- Phoenix Contact AXC F 2152 (2404267)
fixed in 2021.0 LTS
- Phoenix Contact AXC F 3152 (1069208)
fixed in 2021.0 LTS
- Phoenix Contact RFC 4072S (1051328
fixed in 2021.0 LTS
- Phoenix Contact AXC F 2152 Starterkit (1046568)
fixed in 2021.0 LTS
- Phoenix Contact PLCnext Technology Starterkit (1188165)
fixed in 2021.0 LTS