Skip to content
OpenAdvisories
High VDE-2018-012 1 CVE

PHOENIX CONTACT: ILC 1x1 ETH Denial of Service

Published Aug 13, 2018 · Updated Aug 13, 2018

Summary

The processing program of the IEC 61131 program can be slowed down or stopped completely by creating a large amount of network traffic that needs to be handled by the ILC.

Details

Impact
The processing of the network load takes up so much CPU power that the operation of all functions of the device, including the 61131 program, will slow down. This may affect the automation task. Once the network load is removed the ILC will return to normal state.

Mitigation
Customers using Phoenix Contact ILC 1x1 are recommended to operate the devices in closed networks or protected with a suitable firewall.

For detailed information on our recommendations for measures to protect network-cabable devices, please refer to our application note:
https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf

Vulnerabilities 1

  • High 7.5
    CVE-2018-25112

    PHOENIX CONTACT: ILC 1x1 ETH Denial of Service

    An unauthenticated remote attacker may use an uncontrolled resource consumption in the IEC 61131 program of the affected products by creating large amounts of network traffic that needs to be handled by the ILC. This results in a Denial-of-Service of the devi…

    Phoenix Contact ILC 131 ILC 171 ILC 151 ICS / OT

Revision history

  1. #1.0.0

    Initial revision.

References