Skip to content
OpenAdvisories
High VDE-2021-025 2 CVEs

PHOENIX CONTACT: Security Advisory for PLCNext, ILC 2050 BI, FL MGUARD DM UNLIMITED, TC ROUTER und CLOUD CLIENT products

Published Jun 23, 2021 · Updated May 14, 2025 · Revision 3

Vendor: Phoenix Contact Product: AXC F 1152 Product: AXC F 2152 Product: AXC F 2152 Starterkit Product: AXC F 3152 Product: CLOUD CLIENT 1101T-TX/TX Product: CLOUD CLIENT 2002T-4G EU Product: CLOUD CLIENT 2002T-WLAN Product: CLOUD CLIENT 2102T-4G EU WLAN Product: ENERGY AXC PU Product: FL MGUARD DM UNLIMITED Product: ILC 2050 BI Product: ILC 2050 BI-L Product: PLCnext Technology Starterkit Product: RFC 4072S Product: SMARTRTU AXC IG Product: SMARTRTU AXC SG Product: TC ROUTER 2002T-3G Product: TC ROUTER 3002T-4G Product: TC ROUTER 3002T-4G ATT Product: TC ROUTER 3002T-4G VZW Product: TC ROUTER 4002T-4G EU Product: TC ROUTER 4102T-4G EU WLAN

Summary

A Denial of Service and a CA Check Problem have been identified in multiple openSSL 1.1.1 versions, which are utilized in the Phoenix Contact products listed above.

Details

Impact
Note: ILC 20250 is only affected by CVE-2021-3449

Mitigation
Phoenix Contact recommends operating network-capable devices in closed networks or protected with a suitable firewall. For detailed information on our recommendations for measures to protect network-capable devices, please refer to our application note:
Measures to protect network-capable devices with Ethernet connection

Remediation
Phoenix Contact strongly recommends updating to the latest firmware mentioned in the list of affected products, which fixes this vulnerability.
A fix for ILC 2050, and some TC ROUTER and CLOUD CLIENT devices will be available end of Q2 2021. This advisory will be updated as soon as the fixes are available for download.

Vulnerabilities 2

  • High 7.4
    CVE-2021-3450 Public exploit EPSS 18%

    CA certificate check bypass with X509_V_FLAG_X509_STRICT

    The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded e…

    OpenSSL OpenSSL openssl openssl Debian Alpine crates.io
  • Medium 5.9
    CVE-2021-3449 Public exploit EPSS 64%

    NULL pointer deref in signature_algorithms processing

    An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a si…

    OpenSSL OpenSSL openssl openssl Debian Ubuntu Alpine crates.io

Revision history

  1. #3

    Fix: version space, added distribution

  2. #2

    Update: Provider data has been corrected

  3. #1

    Initial revision.

References