6.5
Medium
CVE-2020-12521 On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS a specially crafted LLDP packet may lead to a high…
Description
On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS a specially crafted LLDP packet may lead to a high system load in the PROFINET stack. An attacker can cause failure of system services or a complete reboot.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| AXC F 1152 (1151412) | Versions not published | |
| AXC F 2152 (2404267) | Versions not published | |
| AXC F 3152 (1069208) | Versions not published | |
| RFC 4072S (1051328 | Versions not published | |
| AXC F 2152 Starterkit (1046568) | Versions not published | |
| PLCnext Technology Starterkit (1188165) | Versions not published |
Other CVEs of AXC F 1152 (1151412)
The 4 CVEs of AXC F 1152 (1151412) →
CVE-2020-12517
On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an authenticated low privileged user could embed…
8.8
High
CVE-2020-12518
On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an attacker can use the knowledge gained by…
5.5
Medium
CVE-2020-12519
On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an attacker can use this vulnerability i.e
8.8
High