CVE-2021-34570
Phoenix Contact: DoS for PLCnext Control devices in versions prior to 2021.0.5 LTS
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 2021.0.5 LTS
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
Multiple Phoenix Contact PLCnext control devices in versions prior to 2021.0.5 LTS are prone to a DoS attack through special crafted JSON requests.
Timeline
- CVE published
- Record last updated
Affected versions
- Phoenix Contact AXC F
From AXC F 1152 (1151412) · fixed in 2021.0.5 LTS; From AXC F 2152 (2404267) · fixed in 2021.0.5 LTS; From AXC F 3152 (1069208) · fixed in 2021.0.5 LTS; From AXC F 2152 Starterkit (1046568) · fixed in 2021.0.5 LTS
- Phoenix Contact RFC
From RFC 4072S (1051328) · fixed in 2021.0.5 LTS
- Phoenix Contact PLCnext
From PLCnext Technology Starterkit (1188165) · fixed in 2021.0.5 LTS