Skip to content
Sign in
7.5 High

CVE-2021-21005 In Phoenix Contact FL SWITCH SMCS series products in multiple versions if an attacker sends a hand-crafted TCP-Packet…

Description

In Phoenix Contact FL SWITCH SMCS series products in multiple versions if an attacker sends a hand-crafted TCP-Packet with the Urgent-Flag set and the Urgent-Pointer set to 0, the network stack will crash. The device needs to be rebooted afterwards.

Affected products and versions

Product Affected versions Fixed in
FL SWITCH 4.70 earliest → 4.70 No fix stated
FL NAT 4.63 earliest → 4.63 No fix stated

Other CVEs of FL SWITCH

The 3 CVEs of FL SWITCH →
CVE-2021-21004 In Phoenix Contact FL SWITCH SMCS series products in multiple versions an attacker may insert malicious code via LLDP… 7.4 High CVE-2021-21003 In Phoenix Contact FL SWITCH SMCS series products in multiple versions fragmented TCP-Packets may cause a Denial of… 5.3 Medium
Track this CVE