Skip to content
OpenAdvisories
High · 7.3 CVE-2021-33540 EUVD-2021-20232GHSA-vgp3-9m7m-h7cr

Phoenix Contact: Undocumented FTP acces in certain AXL F BK and IL BK devices

Published Jun 25, 2021 · Updated Sep 17, 2024 · Assigned by CERTVDE

Description

In certain devices of the Phoenix Contact AXL F BK and IL BK product families an undocumented password protected FTP access to the root directory exists.

Affected products

VendorProductAffectedFixed
Phoenix Contact AXL F BK AXL F PN TPS XC (1068857) – < 1.30, AXL F EIP EF (2702782) – < 1.30, AXL F PN TPS (2403869) – < 1.30, AXL F EIP (2688394) – < 1.30, AXL F ETH (2688459) – < 1.30, AXL F ETH XC (2701949) – < 1.30, AXL F S3 (2701686) – < 1.40, AXL F PN (2701815) all revisions, AXL F PN XC (2701222) all revisions, AXL … 1.30
Phoenix Contact IL IL PN BK-PAC (2403696) all revisions, IL PN BK DI8 DO4 2TX-PAC (2703994) all revisions, IL PN BK DI8 DO4 2SCRJ-PAC (2878379) all revisions, IL ETH BK DI8 DO4 2TX-XC-PAC (2701388) all revisions, IL ETH BK DI8 DO4 2TX-PAC (2703981) all revisions, IL EIP BK DI8 DO4 2TX-PAC (2897758) all revisions, IL … —

Advisories 1

References