Description
In Phoenix Contact FL SWITCH SMCS series products in multiple versions if an attacker sends a hand-crafted TCP-Packet with the Urgent-Flag set and the Urgent-Pointer set to 0, the network stack will crash. The device needs to be rebooted afterwards.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Phoenix Contact | FL SWITCH | SMCS 16TX (2700996) – ≤ 4.70, SMCS 14TX/2FX (2700997) – ≤ 4.70, SMCS 14TX/2FX-SM (2701466) – ≤ 4.70, SMCS 8GT (2891123) – ≤ 4.70, SMCS 6GT/2SFP (2891479) – ≤ 4.70, SMCS 8TX-PN (2989103) – ≤ 4.70, SMCS 4TX-PN (2989093) – ≤ 4.70, SMCS 8TX (2989226) – ≤ 4.70, SMCS 6TX/2SFP (2989323) – ≤ 4.70, SMN 6TX/… | — |
| Phoenix Contact | FL NAT | SMN 8TX (2989365) – ≤ 4.63, SMN 8TX-M (2702443) – ≤ 4.63 | — |
Advisories 1
- VDE-2021-023 PHOENIX CONTACT: Security Advisory for FL SWITCH SMCS series CERT@VDE · May 14, 2025