Description
On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS a specially crafted LLDP packet may lead to a high system load in the PROFINET stack. An attacker can cause failure of system services or a complete reboot.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Phoenix Contact | AXC F 1152 (1151412) | unspecified – < 2021.0 LTS | 2021.0 LTS |
| Phoenix Contact | AXC F 2152 (2404267) | unspecified – < 2021.0 LTS | 2021.0 LTS |
| Phoenix Contact | AXC F 3152 (1069208) | unspecified – < 2021.0 LTS | 2021.0 LTS |
| Phoenix Contact | RFC 4072S (1051328 | unspecified – < 2021.0 LTS | 2021.0 LTS |
| Phoenix Contact | AXC F 2152 Starterkit (1046568) | unspecified – < 2021.0 LTS | 2021.0 LTS |
| Phoenix Contact | PLCnext Technology Starterkit (1188165) | unspecified – < 2021.0 LTS | 2021.0 LTS |
Advisories 1
- VDE-2020-049 Phoenix Contact: Multiple vulnerabilities in PLCnext Control devices < 2021.0 LTS CERT@VDE · Dec 17, 2020