Description
In Phoenix Contact FL SWITCH SMCS series products in multiple versions an attacker may insert malicious code via LLDP frames into the web-based management which could then be executed by the client.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Phoenix Contact | FL SWITCH | SMCS 16TX (2700996) – ≤ 4.70, SMCS 14TX/2FX (2700997) – ≤ 4.70, SMCS 14TX/2FX-SM (2701466) – ≤ 4.70, SMCS 8GT (2891123) – ≤ 4.70, SMCS 6GT/2SFP (2891479) – ≤ 4.70, SMCS 8TX-PN (2989103) – ≤ 4.70, SMCS 4TX-PN (2989093) – ≤ 4.70, SMCS 8TX (2989226) – ≤ 4.70, SMCS 6TX/2SFP (2989323) – ≤ 4.70, SMN 6TX/… | — |
| Phoenix Contact | FL NAT | SMN 8TX (2989365) – ≤ 4.63, SMN 8TX-M (2702443) – ≤ 4.63 | — |
Advisories 1
- VDE-2021-023 PHOENIX CONTACT: Security Advisory for FL SWITCH SMCS series CERT@VDE · May 14, 2025