Skip to content
OpenAdvisories
Critical VDE-2021-059 8 CVEs

PHOENIX CONTACT: BLUEMARK X1 / LED / CLED printers utilizing the Siemens Nucleus RTOS TCP/IP Stack

Published Jan 11, 2022 · Updated May 22, 2025 · Revision 2

Vendor: Phoenix Contact Product: BLUEMARK CLED Product: BLUEMARK LED Product: BLUEMARK X1

Summary

The TCP/IP stack and of the networking component (Nucleus NET) in Nucleus Real-Time Operating System (RTOS) contain several vulnerabilities. Nucleus NET is utilized by BLUEMARK X1 / LED / CLED.

The abovementioned BLUEMARK printers are discontinued and only impacted by a subset of 8 of the 13 discovered vulnerabilities.

Details

Impact
BLUEMARK X1 / LED / CLED printers that are only operated via USB interface are not affected.

In the following, the known security vulnerabilities with the possible effects are described if the BLUEMARK X1 / LED / CLED is operated via network. This means that the effects listed below can only occur if these conditions exist. Please refer to the mitigation section for additional protective measures.

Mitigation
Phoenix Contact recommends operating network-capable devices in closed networks or protected with a suitable firewall. For detailed information on our recommendations for measures to protect network-capable devices, please refer to our application note: Measures to protect network-capable devices with Ethernet connection external link

Vulnerabilities 8

Revision history

  1. #2

    Fix: quotation mark

  2. #1

    Initial revision.

References