Skip to content
OpenAdvisories
High · 7.5 CVE-2021-34570 EUVD-2021-21220GHSA-5jgp-38vj-293v

Phoenix Contact: DoS for PLCnext Control devices in versions prior to 2021.0.5 LTS

Published Sep 27, 2021 · Updated Sep 16, 2024 · Assigned by CERTVDE

Vendor: Phoenix Contact Product: AXC F Product: PLCnext Product: RFC Category: ICS / OT

Description

Multiple Phoenix Contact PLCnext control devices in versions prior to 2021.0.5 LTS are prone to a DoS attack through special crafted JSON requests.

Affected products

VendorProductAffectedFixed
Phoenix Contact AXC F AXC F 1152 (1151412) – < 2021.0.5 LTS, AXC F 2152 (2404267) – < 2021.0.5 LTS, AXC F 3152 (1069208) – < 2021.0.5 LTS, AXC F 2152 Starterkit (1046568) – < 2021.0.5 LTS 2021.0.5 LTS
Phoenix Contact RFC RFC 4072S (1051328) – < 2021.0.5 LTS 2021.0.5 LTS
Phoenix Contact PLCnext PLCnext Technology Starterkit (1188165) – < 2021.0.5 LTS 2021.0.5 LTS

Advisories 1

References